Companies need to take a hard look at the cybersecurity risks in their supply chains, contract for the right protections, and build their facilities securely from the ground up.