single-region supplier risk