SUPPLY CHAIN DUE DILIGENCE: MAPPING DEPENDENCIES AND VULNERABILITIES