Pentagon supply chain risk designation history explained