The recent massive cyberattack against government agencies and the private sector, suspected to emanate from Russia, has made the federal IT supply chain a front-and-center concern. In that incident, malware embedded in a software update of a technology product enabled hackers to roam undetected on customers’ networks, including federal systems, for at least nine months.