In the U.S. regulatory context, supply chain risk typically refers to the potential threat that a vendor, product, or technology may pose to critical infrastructure, government systems, or national security.