Information security risk assessment in SCM | IEEE Conference Publication | IEEE Xplore