Risk assessment is part of the internal control procedure which encompasses supply chain risk as well as risks posed by third party. If you are looking a useful content on fraud prevention, look at here.