Supply Chain Security Risks | Protect Your Organization
- Cybersecurity leaders are grappling with notable supply chain and third-party risks, according to a recent SecurityScorecard survey.
- The survey revealed that 88% of respondents are either very or somewhat concerned about supply chain cybersecurity risks.
- Research indicates that third-party involvement in cyberattacks has doubled recently, climbing from 15% to 30%.
Cybersecurity threats are escalating, and supply chain security is under siege. A recent report reveals that 70% of businesses suffered a third-party attack in the last year, making proactive defense essential.This article unveils the growing dangers of supply chain cybersecurity risks, emphasizing the need for immediate action to protect your organization. Discover why smaller software providers are prime targets and how current risk management strategies fall short. Learn about the shift to active defense, integrated detection, and response mechanisms, and how to stay ahead of these persistent threats. News Directory 3 provides crucial insights into these evolving cybersecurity challenges. Discovering how to safeguard your organization’s future is just a click away. Discover what’s next …
Supply Chain Cybersecurity Risks Persist Amid rising Third-Party Attacks
Cybersecurity leaders are grappling with notable supply chain and third-party risks, according to a recent SecurityScorecard survey. CISOs and security professionals globally are struggling to keep pace with escalating threats.
The survey revealed that 88% of respondents are either very or somewhat concerned about supply chain cybersecurity risks. A significant 70% reported experiencing one or more material third-party cybersecurity incidents, with 5% enduring 10 or more such incidents in the past year. Smaller software providers often lack the robust cybersecurity capabilities of larger organizations, making them attractive targets for cybercriminals seeking entry points into larger firms. This highlights the growing importance of supply chain security.
Research indicates that third-party involvement in cyberattacks has doubled recently, climbing from 15% to 30%. As industries increasingly rely on digital technologies,their dependence on third-party software also grows,further exacerbating the risk.
Organizations face the challenge of implementing stringent cybersecurity practices.Though, only 26% have integrated supply chain security into their cybersecurity programs, frequently enough relying on vendor assessments or cyber insurance. Data overload and difficulty prioritizing threats pose significant challenges for nearly 40% of respondents.
Ryan sherstobitoff, Field Chief Threat Intelligence Officer at SecurityScorecard, emphasized the urgency of the situation.
“Supply chain cyberattacks are no longer isolated incidents; they’re a daily reality.”
Sherstobitoff added that current third-party risk management is too passive, focusing on assessments rather than proactive action. He advocated for a shift to active defense, emphasizing the need for supply chain incident response capabilities that integrate third-party risk teams with security operations centers for real-time threat detection and response.
What’s next
The focus moving forward will be on integrated detection and response to combat dynamic threats and improve overall supply chain cybersecurity.