Supply chain security for critical infrastructure

All modern critical infrastructures rely on digital supply chains to a greater or lesser extent. Somebody needs to acquire the digital goods and services that keep the critical infrastructure running, but how can one ensure that this is done in