Supply chain risk management (SCRM) has become an increasingly relevant field of study, driven by operational challenges, global crises, and the increasing complexity of supply chains. Although the number of publications on the topic has increased significantly over the last two decades, empirical research aimed at practical applications is still limited. In this context, the present research aims to select and rank tools for use in SCRM in direct and indirect suppliers of the automotive industry. As a secondary objective, the research aimed to identify which risk management stages (identification, analysis, and assessment) are most relevant for SCRM. Methodologically, the research was conducted in two main stages, the first involving the Delphi method in twenty suppliers (Tier 2) to select and evaluate risk management tools and the second involving the AHP method in an auto parts manufacturer (Tier 1) to rank the tools raised in the previous step. The main results show that the risk identification phase is considered the most relevant in the SCRM process, being prioritized by 56% of the experts. Regarding the tools, the ISO 31010 techniques most suitable for SCRM in suppliers, in order of priority, are FMEA, SWIFT, and cause and consequence analysis, standing out for their ability to identify and prevent failures.