Prioritizing Risk to Reduce Supply Chain Vulnerabilities