Simple solutions for sustainable procurement and performance: presenting a supply chain risk categorisation framework