Third-party management plays a crucial part in supply chain security as attackers shift their focus to lower-tier suppliers.