Resources

Academy

Mastering supply chain risk and creating a world-class supply chain risk management programme with the help of Risk Ledger’s educational resources.

Featured

Modernising the Risk Rating Matrix

Move beyond static risk rating matrices with dynamic, contextual vendor risk scoring powered by continuous monitoring and shared intelligence.

August 4, 2025

・

6

mins read

Risk Ledger

Company

Assessment Framework

Everything you need to know about our standardised supplier assessment framework and how it maps to leading frameworks like NIST, ISO 27001 and ISO 27002, CIS, COBIT, and others.

Supply Chain Maturity Quiz

How mature is your organisation’s supply chain risk management programme, and what can you do to take it to the next level? Find out today.

Data & Security Framework

Risk Ledger is a security platform built by people who care about security for people who care about security. This outlines Risk Ledger’s approach to security.

Recent Explainers & Guides

Explainers & Guides

Modernising the Risk Rating Matrix

Move beyond static risk rating matrices with dynamic, contextual vendor risk scoring powered by continuous monitoring and shared intelligence.

Dora Compliance Checklist: Prepare Your Digital Resilience

Get DORA-compliant with this actionable DORA compliance checklist for financial institutions across the EU.

Understanding the NIST Cybersecurity Framework

Learn what the NIST Cybersecurity Framework is and how it helps organizations manage cyber risks, improve resilience, and align with industry standards.

Latest Emerging Threats

Emerging Threat

How to brief your board effectively on the ToolShell On-Prem SharePoint Vulnerability

The “ToolShell” vulnerabilities (CVE-2025-53770 and CVE-2025-53771) highlight a persistent challenge for boards and executives: the risks posed by prevalent use of file sharing tools and collaboration platforms, and the lack of end-to-end visibility across the supply chain.

ToolShell On-Prem SharePoint Vulnerabilities: Emerging Threat Published on Risk Ledger

Microsoft has disclosed two vulnerabilities: CVE-2025-53770 (CVSS 9.8/Critical) and CVE-2025-53771. The exploit method is referred to as a “ToolShell” attack. Find out everything you need to know in this new Risk Ledger Emerging Threats blog.

Chief Operating Officer

Emerging Threat

How to Manage Emerging Supply Chain Threats

When new vulnerabilities are discovered and threats emerge, organisations have to quickly figure out to what extent their supply chain is affected.

From Engineering

Join our growing community

Sign up to our monthly newsletter to receive exclusive research and analyses by our experts, the latest case studies from our clients as well as guides, explainers and more to turn your supply chain risk management programme into a resounding success story.