Explainers & Guides

Discover how the upcoming UK Cyber Security and Resilience Bill will introduce robust new duties on critical suppliers, expand regulatory oversight, and future-proof the UK's critical national infrastructure.

In this regulatory explainer, we outline the key NIS2 mandates, their implications for third-party risk management (TPRM), and how companies can achieve compliance and become more resilient to supply chain incidents.

Geopolitical upheaval and growing cyber threats are putting UK energy supply chains at risk. In this article, we explore ways to secure critical national infrastructure against this growing threat through collaboration.

In this Explainer, we offer insights into why data protection and confidentiality should be top-of-mind of any cyber security team, and how to ensure that your external vendors and service providers to not pose a risk to your or your customers' data.

This article explores the challenges of managing supply chain risk for resource-constrained housing associations at a time of digital transformation and growing cybersecurity threats.

In this Explainer article you will learn about the third-party risk management implications of the General Data Protection Regulation (GDPR), and how to achieve data security and conduct due diligence within your extended supply chain.

In this Explainer, we explore the 5 leading third-party risk management challenges facing resource-strapped UK Councils, and offer some insights into a new approach to TPRM and supply chain security that could offer a solution.

This article explores the implications of the new Critical Third Parties Regime to the UK Financial Sector regime – and how an innovative approach to third-party risk management can help critical suppliers gain the visibility into their extended supply chains to achieve compliance.

In this third-party risk management (TPRM) guide for CISOs, we break down everything there is to know about TPRM - including why TPRM matters, how to set up and run an effective TPRM programme, what to do in case of a supply chain breach, and how best to automate your TPRM efforts.

In this Risk Ledger Explainer, you will learn about ISO 27001 requirements relating to third-party risk management (TPRM) and what your organisation can do to implement a world-class TPRM and supply chain risk management programme beyond compliance.

This article analyses the third-party risk management challenges facing the wealth management sector, and offers suggestions for how to strengthen firms' resilience against supply chain cyber attacks and data breaches.

This article discusses how network immunisation theory might hold the answer how to secure our increasingly complex digital supply chains from cyber attacks by focusing on hardening the security of the most important 'nodes' in this vast ecosystem of interconnected organisations and service providers.