Enterprise risk management: a DEA VaR approach in vendor selection | Synapse