Failure to fully engage the sector’s supply chain is worrisome because vendors will likely be targeted by hackers and must be involved in the response to an actual cyberattack, experts say.