Supply chain risk and transparency in incident response are among the things keeping cybersecurity-focused government officials and partners up at night.