In supply chain risk management, a 'single-source' supplier strategy primarily creates which type of risk?