Organizations are paying too little attention to the risk of their supply chain information being compromised through cyberattack.