Cybersecurity surveys tend to focus on the user and the enterprise. But how secure are the processes of our software providers? Not great, according to one cybersecurity CISO.