Managing firm risk through supply chain dependence: an SME perspective | Synapse