Abstract: An apparatus for building an information model for supply chain risk decision making includes a risk selection module, a priority module, a risk assessment module, and a scheduling module. The risk selection module selects, based upon a profiling questionnaire, one or more risk categories for an assessment subject. The priority module sets, based upon the profiling questionnaire, a level of importance of and a risk tolerance for the assessment subject in a supply chain. The risk assessment module receives, for each risk category of the one or more risk categories for the assessment subject, a likelihood and an impact of the risk category. The scheduling module sets a risk assessment schedule of the assessment subject based upon the level of importance of the assessment subject.