As best practice, being able to address security requirements with your critical service providers is consistently included in all of the major cyber security standards.
Why is this? Paul Traill, our Head of Risk and Compliance has produced an article for In-procurement Magazine on the topic of ensuring your supply chain is secure and the ways in which organisations can achieve this precisely and effectively.
The article includes overviews into the security risks that a business could be currently facing, the ways in which these can be mitigated and an in-depth explanation into specific practices to be undertaken with the assistance of key tabular data illustrating the security/data protection standards and suppliers assurance.
How PGI can help secure your supply chain
Of course, cyber security should be a key consideration in any decision on new partnerships/collaborations or decisions on suppliers, providers, mergers and acquisitions, but we know you know that. However, sometimes it’s a matter of getting started and that’s often the hardest part.
We offer a range of services to help you gain a deeper understanding and more control over your supply chain management, including our Cyber Assurance as a Service offering, which enables you to call on a full team with specialist expertise for your information and cyber security requirements. This knowledge includes creating and implementing risk assessment processes, creating supplier assurance policies and procedures (such as security-related contract clauses, and due diligence questionnaires), and carrying out onsite supply chain audits.
If you’re ready to take more control of your supply chain, talk to us.
Insights
Trust & Safety: A look ahead to 2025
Working within the Trust and Safety industry, 2024 has been PGI’s busiest year to date, both in our work with clients and our participation in key conversations, particularly around the future of regulation, the human-AI interface, and child safety.
Lies, damned lies, and AI - Digital Threat Digest
At their core, artificial systems are a series of relationships between intelligence, truth, and decision making.
A pointless digital jigsaw - Digital Threat Digest
Feeding the name of a new criminal to the online OSINT community is like waving a red rag to a bull. There’s an immediate scramble to be the first to find every piece of information out there on the target, and present it back in a nice network graph (bonus points if you’re using your own network graph product and the whole thing is a thinly veiled advert for why your Ghunt code wrap with its purple-backlit-round-edged-dynamic-element CSS is better than everyone else’s).