Supply chain failures continue to make news. What can third-party risk-management programs do to ensure that their vendors are resilient to continuing change?