How to manage cyber risk across the supply chain

The CIISec ABC Guide on Supplier Management sets out the essential building blocks organisations need to manage supplier cyber risk consistently and proportionately — from understanding what “good” looks like to embedding accountability across procurement, security and operational teams.

In this webinar, we’ll use these principles as a practical lens to explore the supplier lifecycle end to end: assessing risk early, setting expectations during onboarding, securing contracts appropriately, and maintaining oversight through ongoing monitoring and review. We’ll also examine where organisations commonly struggle, including over-reliance on checkbox assurance, limited visibility into sub-contractors, and unclear responsibility for cloud and shared services.

Learning Objectives

• Develop a consistent and proportionate approach to managing supplier cyber risk
• Identify cyber risk at key stages of the supplier lifecycle, from pre-contract assessment to ongoing assurance
• Recognise common weaknesses in supplier assurance approaches and how to address them
• Clarify roles and responsibilities across procurement, security and operational teams
• Improve oversight of complex supplier environments, including sub-contractors and cloud-based services