Resources

Academy

Mastering supply chain risk and creating a world-class supply chain risk management programme with the help of Risk Ledger’s educational resources.

Featured

Supply Chain Security Blind Spots: Mitigating Fourth-Party and Nth-Party Cyber Risks

Explore the hidden dangers of fourth-party supply chain breaches and how they can put your organisation at risk. Learn about the growing need to identify and manage fourth-party cyber risks, with real examples and insights on evolving regulatory requirements.

August 19, 2025

・

8

mins read

Risk Ledger

Company

Assessment Framework

Everything you need to know about our standardised supplier assessment framework and how it maps to leading frameworks like NIST, ISO 27001 and ISO 27002, CIS, COBIT, and others.

Supply Chain Maturity Quiz

How mature is your organisation’s supply chain risk management programme, and what can you do to take it to the next level? Find out today.

Data & Security Framework

Risk Ledger is a security platform built by people who care about security for people who care about security. This outlines Risk Ledger’s approach to security.

Recent Explainers & Guides

Explainers & Guides

Supply Chain Security Blind Spots: Mitigating Fourth-Party and Nth-Party Cyber Risks

Explore the hidden dangers of fourth-party supply chain breaches and how they can put your organisation at risk. Learn about the growing need to identify and manage fourth-party cyber risks, with real examples and insights on evolving regulatory requirements.

Cyber Risk Management Strategies for Businesses

Learn what cyber risk management is, why it matters, and how to build a strong strategy to protect your business from evolving digital threats.

Modernising the Risk Rating Matrix

Move beyond static risk rating matrices with dynamic, contextual vendor risk scoring powered by continuous monitoring and shared intelligence.

Latest Emerging Threats

Emerging Threat

Briefing your board on supply chain attacks like ToolShell

Discover how ToolShell exploits highlight supply chain attacks and what boards must do to assess exposure, brief leadership, and build resilience.

ToolShell On-Prem SharePoint Vulnerabilities: Emerging Threat Published on Risk Ledger

Microsoft has disclosed two vulnerabilities: CVE-2025-53770 (CVSS 9.8/Critical) and CVE-2025-53771. The exploit method is referred to as a “ToolShell” attack. Find out everything you need to know in this new Risk Ledger Emerging Threats blog.

Chief Operating Officer

Emerging Threat

Ivanti Connect Secure Zero-Day Exploitation: Emerging Threat published on Risk Ledger

Learn about the latest emerging threat - CVE-2025-0282 and CVE-2025-0283 affecting Ivanti Connect Secure, Policy Secure and ZTA Gateways that were detailed on 8 January 2025.

From Engineering

Engineering

What is a floating point number, and why do they suck

Find out what a floating point number is and why they suck in this in-depth blog from one of our engineers.

Join our growing community

Sign up to our monthly newsletter to receive exclusive research and analyses by our experts, the latest case studies from our clients as well as guides, explainers and more to turn your supply chain risk management programme into a resounding success story.