BCP is the way, this is all risk management. Get financial lenders to insist on insurance, the insurance companies will figure out how to measure supply chain risk.