The Role of Supplier Ratings in Risk Management and Mitigation