The message to the board is straightforward: supply chain risk is business risk. A single vulnerability in a partner can ...