US defense industry faces supply chain risks as new cybersecurity mandates create significant compliance costs for small businesses, potentially limiting production.