The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be remediated.