Supply-chain attacks cannot be completely prevented, but their impact can be significantly limited through systematic risk mitigation and resilience measures.