
The National Cyber Security Centre (NCSC) has recently published new guidance to help organisations effectively assess and gain confidence in the cyber security of their supply chains.
It follows a significant increase in cyber-attacks resulting from vulnerabilities within supply chains in recent years, including some high-profile incidents such as the SolarWinds attack.
The new guidance is designed to help medium and larger organisations effectively assess the cyber risks of working with suppliers and gain assurance that mitigations are in place.
Supply chain attacks can cause far-reaching and costly disruption, yet the latest government data shows just over one in ten businesses review the risks posed by their immediate suppliers (13%), and the proportion for the wider supply chain is just 7%.
Could you provide a case study?
The NCSC are also looking for organisations of all sizes to share their experience of a cyber incident as an anonymous case study. Incidents can include Phishing with data extortion or malware; Ransomware; Malicious Insider; Data breach; Denial of service or DDOS. If you are willing to share your experience click here