COVID-19 gives rise to new risk calculus for supply chains