All Resources

Learn how to conduct third party risk assessment with clear steps to identify, evaluate, and manage vendor risks for stronger supply chain security.

Learn the 14 NCSC Cloud Security Principles and how Risk Ledger helps assess supplier cloud security and compliance confidently.

Oracle has disclosed a critical vulnerability (CVE-2025-61882, CVSS 9.8) affecting Oracle E-Business Suite (EBS) versions 12.2.3 to 12.2.14.

Risk Ledger sponsors barrier-breaking Team BRIT as the racing team continues on its road to Le Mans and prepares for its first US competition. The multi-year partnership, running until the end of 2026, coincides with Risk Ledger's own international expansion into the US market.

True supply chain security needs industry-wide collaboration. Start with a Standardised Assessment Framework to create a common language of risk across security teams.

UK energy security hinges on robust Third-Party Risk Management (TPRM). Discover how Ofgem's Adapted CAF Profile enforces new, prescriptive standards for supply chain cyber security, demanding continuous assurance and zero-trust principles for critical vendors.

Learn about the supplier risk assessment process to identify, evaluate, and manage supplier risks for a more resilient and disruption-free supply chain.

Learn how to conduct a security risk assessment, key steps, controls, and tools to protect your business from cyber and physical security threats.

Discover how vulnerabilities in third-party suppliers put passenger safety and operations of the UK aviation industry at risk, and why strengthening supply chain risk management is now a critical board-level priority for aviation leaders.

Explore the hidden dangers of fourth-party supply chain breaches and how they can put your organisation at risk. Learn about the growing need to identify and manage fourth-party cyber risks, with real examples and insights on evolving regulatory requirements.

Learn what cyber risk management is, why it matters, and how to build a strong strategy to protect your business from evolving digital threats.

Discover how Fourth Parties, a new capability on the Risk Ledger Supply Chain Security Platform, gives you instant visibility into the critical suppliers your suppliers rely on. Visualise your extended supply chain and uncover hidden concentration risk.

Move beyond static risk rating matrices with dynamic, contextual vendor risk scoring powered by continuous monitoring and shared intelligence.

Discover how ToolShell exploits highlight supply chain attacks and what boards must do to assess exposure, brief leadership, and build resilience.

The insurance market faces rising compliance burdens and complex third-party risk management. This article explores how industry-wide collaboration and streamlined processes can ease these challenges and support growth.

Microsoft has disclosed two vulnerabilities: CVE-2025-53770 (CVSS 9.8/Critical) and CVE-2025-53771. The exploit method is referred to as a “ToolShell” attack. Find out everything you need to know in this new Risk Ledger Emerging Threats blog.

Discover why traditional third-party risk management falls short amid rising global volatility. Learn how organisations can shift from siloed, compliance-driven approaches to proactive, collaborative, and intelligence-led TPRM in this new article by Risk Ledger CEO Haydn Brooks.

Get DORA-compliant with this actionable DORA compliance checklist for financial institutions across the EU.

De-globalisation and global de-risking are fundamentally transforming global supply chains. This trend will amplify cyber security risks in the short- to medium-term. Find out why in this latest article.

Learn what the NIST Cybersecurity Framework is and how it helps organizations manage cyber risks, improve resilience, and align with industry standards.

In an era of geopolitics and de-risking, over-reliance on suppliers from problematic jurisdictions has exposed global supply chains to new vulnerabilities and risks. This article explains why traditional third-party risk management no longer suffices and explores how greater visibility and collaboration can help organisations navigate today’s complex, high-stakes environment.

Explore key findings from the "Every Link Matters: The State of Supply Chain Security 2025 – UK Edition" report. Learn why UK organisations face growing supply chain cyber threats, the limitations of traditional TPRM, and how collaborative defence strategies are crucial for resilience and regulatory compliance.

Get the definitive report on the State of UK Supply Chain Security in the UK in 2025. Based on a survey of 500+ professionals, this report reveals the growing threat landscape, key risks, and the power of collaboration to build cyber resilience.

The UK’s critical transport infrastructure is at risk from cyber-attacks. In this article, we explore the threats, the challenges for transport operators, and how to protect supply chains against the hackers.

In this article, we highlight the top-10 most overlooked supply chain cyber security risks business leaders should be aware of – and suggest actions to mitigate these risks.

Learn about supply chain security, including how to protect physical goods and digital assets while managing risks with suppliers and vendors.

As supply chain security risks intensify and regulations tighten, we ask whether much-vaunted Trust Centres are up to the challenge of enabling effective third-party risk management (TPRM).

This article examines the proliferation of APIs in IT ecosystems, the associated cyber security risks, and how organisations can protect their supply chains against API-related attacks.

Discover the risk management lifecycle and how to manage third-party, vendor, and supply chain risks effectively at every stage.

With new regulations like DORA demanding deeper supply chain visibility, a pioneering collaborative project showed how through collaboration, banks can identify hidden systemic risks and enhance sectoral resilience.

Get a comprehensive guide to the UK Government Cyber Security Strategy (GCSS) and the NCSC's Cyber Assessment Framework (CAF). Learn how to secure your public sector supply chain.

This article highlights the growing threat of AI-driven supply chain attacks and demonstrates how organisations can harness the power of AI to reinforce their defences.

Learn everything about Product Level Answers, a new Risk Ledger product feature that allows suppliers to accurately represent the true nature of their security controls across multiple products and services, while giving clients the granular visibility they need to make informed risk decisions.

Discover how the upcoming UK Cyber Security and Resilience Bill will introduce robust new duties on critical suppliers, expand regulatory oversight, and future-proof the UK's critical national infrastructure.

Risk Ledger has joined the Lloyd's Market Association (LMA) as an Associate Member, marking a major milestone in our commitment to the Insurance industry.

This article explores the importance of collaboration with industry peers to advance third-party risk management – helping organisations address fast-growing risks from supply chain cyber-attacks.

We're launching Product Level Answers, a new enhancement that simplifies due diligence across multiple products from the same supplier. This marks our first major release designed specifically to enhance the supplier experience.

In this second article in our series "Breaking down Silos: The Power of Collaboration in TPRM", we explain how enhanced collaboration with suppliers can overcome many of the current shortcomings with TPRM, enabling faster incident response, deeper supply chain insight, and a stronger collective defence against supply chain cyber threats.

In this regulatory explainer, we outline the key NIS2 mandates, their implications for third-party risk management (TPRM), and how companies can achieve compliance and become more resilient to supply chain incidents.

This first article in our series “Breaking Down Siloes: The Power of Collaboration in TPRM”, we zoom in on why cross-team collaboration on third-party risk management is crucial, and how to achieve it.

In this article, we examine the impacts of geopolitical uncertainty and trade tensions in 2025, and how organisations can secure their supply chains and minimise cybersecurity risks.

In this Explainer, we offer insights into why data protection and confidentiality should be top-of-mind of any cyber security team, and how to ensure that your external vendors and service providers to not pose a risk to your or your customers' data.

In this byline for FUTURESCOT by Risk Ledger's Chief Cyber Security Strategist, Justin Kuruvilla, you will learn how better collaboration on supply chain risk management can significantly enhance organisations' operational resilience.

Risk Ledger is excited to announce its new partnership with London Market Forums (LMF), marking a significant investment in the future of the insurance industry, enhancing supply chain security, building trust in risk assessments, and driving proactive risk management.

This article explores the challenges of managing supply chain risk for resource-constrained housing associations at a time of digital transformation and growing cybersecurity threats.

Find out how the General Data Protection Regulation (GDPR) impacts third-party risk management, how to achieve data security, and how to conduct due diligence within your extended supply chain.

In this Explainer, we explore the 5 leading third-party risk management challenges facing resource-strapped UK Councils, and offer some insights into a new approach to TPRM and supply chain security that could offer a solution.

Risk Ledger has been included in this year's techUK and Tussel 4th Annual Tech200 list of fastest growing tech companies in the UK public sector.

This article dissects the supply chain cyber security challenges facing our critical national infrastructure, and explores how a more collaborative approach to third-party risk management and supply chain security can hold the answer.

This article explores the implications of the new Critical Third Parties Regime to the UK Financial Sector regime – and how an innovative approach to third-party risk management can help critical suppliers gain the visibility into their extended supply chains to achieve compliance.

In this third-party risk management (TPRM) guide for CISOs, we break down everything there is to know about TPRM - including why TPRM matters, how to set up and run an effective TPRM programme, what to do in case of a supply chain breach, and how best to automate your TPRM efforts.

Learn how ISO 27001 requirements relate to third-party risk management (TPRM) and what you can do to implement a world-class TPRM and supply chain risk management programme that goes beyond compliance.

In this article published by SupplyChain Security, Justin Kuruvilla, Chief Cyber Security Strategist at Risk Ledger, analyses the trends and challenges facing supply chain security teams in 2025.

This article analyses the third-party risk management challenges facing the wealth management sector, and offers suggestions for how to strengthen firms' resilience against supply chain cyber attacks and data breaches.

Risk Ledger was named as one of the top 150 cyber security vendors worldwide in IT-Harvest's prestigious Cyber 150 list for 2025.

Learn about the latest emerging threat - CVE-2025-0282 and CVE-2025-0283 affecting Ivanti Connect Secure, Policy Secure and ZTA Gateways that were detailed on 8 January 2025.

This article discusses how network immunisation theory might hold the answer how to secure our increasingly complex digital supply chains from cyber attacks by focusing on hardening the security of the most important 'nodes' in this vast ecosystem of interconnected organisations and service providers.

Explore 2025 black swan events that could affect supply chain security and why vendor risk assessment is crucial in mitigating these threats.

Explore how a unified approach to vendor risk assessment can strengthen third-party risk management for the future.

In this 'The Security Strategist' podcast, Risk Ledger CEO Haydn Brooks discusses with Paulina Rios Maya the importance of effective third-party risk management to mitigate the rising threat of supply chain attacks.

Explore the impact of quantum computing on vendor risk assessment and supply chain security, and understand how to prepare for potential disruptions.

Listen our CEO Haydn Brooks explain how Risk Ledger is transforming supply chain cyber security for the public and private sectors, and what our plans are for 2025, in this podcast discussion with The Tech Talks Daily's Neil C.Hughes.

Explore third-party risk management challenges in FinTech and learn strategies to strengthen resilience against supply chain cyber threats.

Risk Ledger wins the 2024 Tech Trailblazers Security Award for transforming cybersecurity and risk management in the supply chain.

Learn more about the XZ Utils backdoor incident that could have easily, if left undetected, evolved into the largest supply chain cyber attack yet, and about some of its third-party risk management (TPRM) implications.

Risk Ledger's 3-stage strategy transforms TPRM from a compliance process to active cyber defense with the first digital SOC for supply chains.

In this third article in our series "Shaping the future of supply chain cyber security", our CEO Haydn Brooks dissects our new Defend-as-One approach and how it is already helping communities of organisations to Defend-as-One against supply chain attacks.

Learn about the cyber security challenges facing the extended digital supply chains of satellite communications providers, and how a more collaborative approach to TPRM could provide the answer to addressing these risks.

In the second article in our series "Shaping the future of supply chain cyber security", our CEO Haydn Brooks explains some of the inherent flaws with third-party risk management, as currently conducted, and why they cannot be rectified by individual organisations or teams.

In Risk Ledger's latest data snapshot report, we reveal the concentration risks we discovered in the supply chains of our Transport clients.

In the first article in our series on "Shaping the Future of Supply Chain Cyber Security", our CEO Haydn Brooks sets out the scale of the problem and discuss why and how threat actors are increasingly targeting our corporate supply chains.

We are thrilled to announce that Risk Ledger has been recognized as one of the most loved companies on Welcome to the Jungle this year! 🎉

Understand vendor risk assessments, their importance, and how to conduct them to effectively manage third-party risks.

In Risk Ledger's latest data snapshot report, we reveal the concentration risks we discovered in the supply chains of our energy clients.

Can gamification help with increasing supplier engagement with third-party risk management programmes? Join us for a thought experiment.

Risk Ledger and Emily Hodges have been named as a finalist for 2024 Tech Trailblazers Awards.

In Risk Ledger's latest data snapshot report, we reveal the concentration risks we discovered in the supply chains of our investment fund and private equity clients.

This article examines the cyber security risks facing Lloyd's market participants, including syndicates, managing agents, brokers and coverholders, from their extended and often overlapping digital supply chains, and suggests a collaborative way forward.

In this article you will learn about the specific supply chain cyber security challenges and risks facing the UK legal sector, and how an effective third-party risk management programme could help.

Learn how a cyber security breach at one critical supplier can impact multiple portfolio companies at the same time in this new article.

In this analysis published by NATO Review, Risk Ledger's CEO Haydn Brooks explains why attacks on the digital supply chains of Britain and its NATO allies are on the rise, and what a more coordinated approach to supply chain security across the Alliance could look like.

Discover how the rise of IoT technology is exposing organisations to new cyber security and supply chain risks.

Explore the impact that fourth-party supply chain breaches can have on your organisation. Learn how vulnerabilities in your extended supply chain can disrupt operations and how to safeguard your business.

Discover our new small framework for smaller and less critical suppliers, our new category of flexible add-on domains, and our new AI control questions in our most recent product update.

Smart cities aim to create more efficient, sustainable and liveable urban environments, but also introduce new cyber security challenges. Find out about smart cities and their third-party risk management implications in this new article.

Learn why building and maintaining one centralised database of all your third-parties is crucial for an effective third-party risk management programme, and get an actionable roadmap for how to achieve it.

A successful third-party risk management (TPRM) programme requires enhanced collaboration between cyber security, procurement and compliance teams, and across the business. Find out how to make cross-team collaboration on TPRM work in practice.

Learn why CISO should't be the sole risk owners in cyber security and third-party risk management, and why responsibility should be shared across the organisation.

When incidents like the recent Microsoft outage strike, human connections and established communication channels between security teams are key. Find out more in this short blog.

Discover the types of suppliers that pose the greatest risks to your organisation if breached in this new Risk Ledger Explainer.

Learn how to establish an effective third-party risk management oversight committee.

Learn about some key talking points and strategies to help you communicate third-party risk management (TPRM) more effectively to your board.

Alice Murray, editor of The Line, speaks to Risk Ledger CEO Haydn Brooks about how alternative investors can approach and manage supply chain risk in their portfolio.

Learn how third party breaches can impact investment funds and their portfolio companies, and how to mitigate these risks.

Discover why hackers target corporate supply chains and learn how understanding their motivations can enhance your cyber security and third-party risk management strategies.

We dive into what it means to develop and implement a proper TPRM policy template.

Find out how a new model of information sharing could drastically improve outcomes in supply chain security.

Learn the key scope and objectives of third-party risk management (TPRM) to improve your organisation's risk assessment and vendor management strategies

Mass IT outage affecting Microsoft Windows systems triggered by a Crowdstrike Falcon sensor update.

In this video with Risk Ledger COO Emily Hodges, you can learn how building strong relationships with suppliers and considering TPRM as an integral part of SecOps is key to better supply chain security.