Don’t attempt to map everything in the supply chain at once. Instead, focus on the highest-risk suppliers.