Information technology and risk management in supply chains