The invention comprises a device for and method of managing supply chain risk at a computer system device comprising a processor, a memory subsystem in communication with the processor, and computer executable instructions storable in the memory subsystem and executable by the processor to perform the method, the method comprising determining a degree of supply chain risk to an enterprise as a function of an effect of a disruption of delivery of the production input to the enterprise on a financial performance metric of the enterprise.