Securing the Supply Chain: A ClubCISO Debate