A federal directive exposed the AI supply chain gap most enterprises haven't closed. Merritt Baer outlines four moves CISOs ...