Risk management and supply chain vulnerability (UK Chartered Institute of Purchasing and supply, 2009)