The topic of supply-chain risk management is fraught with agonizing questions. Should global businesses emphasize risk prevention, or steel themselves to respond to whatever disaster might occur? Should they seek to transfer risk, or concentrate on achieving better risk-management up front? Should they attempt to do all of the above? The wrong answer can mean the death of an organization.