News

Vendor vigilance: Supply chain cybersecurity should be addressed before a breach

07 May 2021

The importance of third-party supply chain cybersecurity has become increasingly apparent over the past few years. The recent well-publicized incident at SolarWinds, an IT service provider, is the latest example of a supply chain attack, where the intended victim is not the organization itself, but rather its customers and business partners.

Over the past year, the cyber "attack surface" and the amount of sensitive data to which third-party vendors have access has increased due to the large uptick in remote working because of the COVID-19 pandemic.

Authored by Peter M. Marta and Jasmeet K. Ahuja.