Many organizations still struggle to understand the risks posed by their suppliers and digital supply chains.