A hybrid risks-informed approach for the selection of supplier portfolio