Cybersecurity Supply Chain Risk Assessment