Rough strokes to supply chain risk here: https://www.cips.org/employers/insights/cips-risk-index/
Lehigh U has a project: https://business.lehigh.edu/centers/center-for-supply-chain-research-at-lehigh/research/lehigh-business-supply-chain-risk-management-index and it looks like the best work out there IMHO. It breaks things down into 10 categories (quoted):
- “Customer Risk
- Cyber Security Risk
- Economic Risk
- Environmental Risk
- Government Intervention Risk
- Operational Risk
- Quality Risk
- Supplier Risk
- Technological Risk
- Transportation Risk”