Rethinking supply chain security for telcos

How telecommunications providers can move beyond static supplier assurance and build a more resilient approach to third-party risk.

Telecommunications providers are under growing pressure to understand, manage and report on supply chain risk.

Regulatory expectations are rising through frameworks such as the Telecommunications Security Act and Telecommunications Security Requirements. At the same time, telco supply chains are becoming harder to oversee, with critical services increasingly dependent on technology partners, infrastructure providers, subcontractors and shared third parties.

In this on-demand webinar, Richard Bell, Head of Cyber Security at Hyperoptic, joins Justin Kuruvilla, Chief Cyber Security Strategist at Risk Ledger, to discuss what supply chain security looks like in practice for modern telcos.

Watch the session to hear how security teams can move away from fragmented, point-in-time reviews and towards a more continuous, collaborative model for supplier assurance.

What you’ll learn

In this session, we cover:

• How TSA and TSR requirements translate into day-to-day supplier risk management
• Why traditional third-party risk processes struggle to keep pace with complex telco supply chains
• How Hyperoptic approaches supplier assurance, cyber resilience and compliance in practice
• Where static assessments leave security teams exposed to changing supplier risk
• What good looks like when measuring supplier security outcomes
• How collaboration can reduce duplicate reviews and improve visibility across the wider supply chain

Why this matters

Telco supply chains are becoming too complex for traditional assurance

Most organisations have some visibility over their direct suppliers.

But in telecommunications, critical dependencies often sit deeper in the supply chain. Technology vendors, infrastructure partners, managed service providers and subcontractors can all play a role in delivering essential services.

That creates a challenge for security and risk teams.

Supplier assurance processes built around spreadsheets, annual questionnaires and disconnected evidence requests often make it difficult to understand what has changed, where risk is concentrated and which suppliers need attention first.

For telcos, supply chain security is no longer just a compliance exercise. It is becoming a resilience issue.

Speaker section

Meet the speakers

Richard Bell

Head of Cyber Security, Hyperoptic

Richard Bell leads cyber security at Hyperoptic, one of the UK’s leading full-fibre broadband providers. In this session, he shares practical insight into how telcos can approach supplier assurance, regulatory expectations and supply chain resilience in a fast-moving environment.

Justin Kuruvilla

Chief Cyber Security Strategist, Risk Ledger

Justin works with security leaders to help organisations build more effective, collaborative approaches to supply chain security. He brings a practical perspective on how teams can move beyond static third-party risk management and improve visibility across their wider supplier ecosystem.

‍