Vendor supply chains are some of the biggest cybersecurity risks for law firms, and are all too often neglected.