Every Link Matters: The State Of Supply Chain Security 2025

90% of UK security teams experienced at least one incident in their supply chain in the past year, while 10% experienced three or more.

The supply chain threat landscape is evolving rapidly & traditional defences aren't keeping pace. This landmark study provides a comprehensive analysis of the supply chain security risk landscape facing the UK in 2025, based on data collected from over 500 cybersecurity professionals as well as proprietary risk insights.


  • 36.8% of UK cyber security professionals identified the lack of visibility into supply chain dependencies as a key shortcoming

  • While 34.8% regard the lack of collaboration and information sharing with industry peers as a key shortcoming

  • 62% organisations said that their TPRM function either only occasionally or rarely collaborate with their industry peers
National Health Service
BAE Systems
British Airways
Telenor
UK Power Networks
Beazley
Civil Aviation Authority
Village Hotels
SGN
Succession Wealth
Admiral
First Sentier Investors
Welsh Water
United Utilities
Simply Business
Times Higher Education World University Rankings
City Fibre
Go Ahead
Pennon
Govia Thameslink Railway
Allica Bank
Schroders Personal Wealth
Anglian Water
Octopus Investments
Gnatta
Synectics Solutions
PR Gloo
UK Health Security Agency
Manchester Police
Department for Environment & Rural Affairs
Grant Thorton
Police Digital Service
Cheshire Constabulary
Westminster Council
Southern Water
Yorkshire Water
Portsmouth Water
Thames Link
Upvest
Crowe
Zenseact
National Health Service
BAE Systems
British Airways
Telenor
UK Power Networks
Beazley
Civil Aviation Authority
Village Hotels
SGN
Succession Wealth
Admiral
First Sentier Investors
Welsh Water
United Utilities
Simply Business
Times Higher Education World University Rankings
City Fibre
Go Ahead
Pennon
Govia Thameslink Railway
Allica Bank
Schroders Personal Wealth
Anglian Water
Octopus Investments
Gnatta
Synectics Solutions
PR Gloo
UK Health Security Agency
Manchester Police
Department for Environment & Rural Affairs
Grant Thorton
Police Digital Service
Cheshire Constabulary
Westminster Council
Southern Water
Yorkshire Water
Portsmouth Water
Thames Link
Upvest
Crowe
Zenseact
Network Trace

What you will learn in this report

How to get visibility beyond the questionnaire

Understand how leading organisations are adopting external intelligence and real-time monitoring to uncover risks that suppliers might not disclose  or even know about.

Learn about the new way to conduct risk management

Move your Third Party Risk Process from a reactive box ticking exercise to an active cyber defence discipline and help keep your company safe.

Understand what regulators are planning

Gain insight into regulator's increased focus on identifying systemic risks to entire sectors, and how you can support their efforts.

Trapezoid
Pattern Trapezoid Mesh

Defend your supply chain with Risk Ledger.