Digital transformation is never done alone.  To deliver your services digitally, you need a distributed chain of resources (eg. infrastructure) and products (eg. software) from your suppliers (eg. vendor) and their suppliers. Resources, Products, and Services are all related assets in a unified supply chain to achieve business goals. However, cybersecurity decisions are still largely territorial, focused on protecting the ‘visible’, owned assets.  Today, cybersecurity decisions must be on securing distributed assets supply chain and especially the ‘invisible’ flows of interactions throughout the chain.  The real challenge of the digital world is to know when and how to control what – and when to let go.