Frame the question
The programme examines dependencies on software vendors, cloud services and contractors. It helps define supplier questions, identify critical access and prepare incident coordination.
Supplier cyber risk
Understand risks beyond your own organisation.
Understand risks beyond your own organisation.
The programme examines dependencies on software vendors, cloud services and contractors. It helps define supplier questions, identify critical access and prepare incident coordination.
5 November 2026 · Drafted a digital supplier questionnaire and reviewed a cloud outage scenario.
Next milestone · 25 February 2027
Test the incident notification procedure.
What we examine
01
Supplier and access criticality
02
Review of security practices
03
Incident notification and recovery
PROJECT PROGRAMME
From a question to a working decision
A proposed sequence for the working group. Scope and timing are agreed with participants.
Examine the options
Discuss the focus areas with specialists, compare assumptions and document information gaps.
Prepare a working output
Prepare a practical checklist, record decisions and agree how the group will review them.
TAKE PART
Bring your experience
Bring a question from your organisation, join an expert discussion or help assess an approach. An initial description should not contain confidential data.
The group works towards a concrete output: a risk map, scenario, pilot requirements or an action plan. Participation depends on expertise and the group’s needs.
Propose a challenge