Mechanisms exist to periodically assess supply chain risks associated with systems, system components and services.