One of the most common ICS supply chain vulnerabilities is the lack of visibility and control over third-party components and software. This can lead to potential security gaps, as vulnerabilities in these elements may not be immediately apparent or under direct control.