Categorization of supply chain risk and risk management