How to diversify supplier risk within supply chain management