A SCRM process integrating all stages of the risk management process is proposed. Interdependency between risk sources, risks and mitigation strategies is captured. New risk measures are introduced for ranking interdependent supply chain risks. Shapley value is utilised to determine a fair allocation of resources to critical risks. A method for selecting optimal risk mitigation strategies is proposed.