Supplier risk assessments usually become urgent after somebody asks a simple question: “Which of our suppliers would create the biggest problem if they were compromised tomorrow?” At that point, many ...