Supply chain security is now a board-level issue: Here’s what CSOs need to know