Security executives who combine security culture, compliance and risk assessments can reduce the impact of security threats to enterprise supply chains.