Supply chain risk: dependency mapping, geographic concentration, geopolitical exposure, alternative sourcing and disrupt