Accordion-2-category: Supply Chain Cyber Risk Management