Overview
Cyber risk doesn’t stop at your firewall. In today’s connected economy, your suppliers, vendors, and third-party providers can become the weakest link in your security posture.
This advanced-level course provides practical, strategic overview in cybersecurity risk management as it applies specifically to modern supply chains. You’ll learn to assess and mitigate threats from hardware, software, open-source components, and external services. Walk away with an actionable SCRM plan, deeper insight into third-party oversight, and alignment with leading frameworks like NIST, SOC2, and CSA STAR.

Who is the programme for?
- Risk managers
- CISOs
- Procurement leaders
- Supply chain directors
- Compliance professionals
Participants will learn how to:
- Map and analyse supply chain digital exposure points
- Identify and prioritise critical suppliers
- Build and implement a supply chain risk management (SCRM) strategy
- Align contracts, SLAs, and audits with the organisation’s security posture
- Evaluate and apply frameworks such as NIST, SOC 2, and CSA CCM
- Monitor third- and fourth-party risk using real-world tools
- Respond effectively to inherited and emerging cyber threats
Course topics include:
- Cyber risk management essentials
- Supply chain attack vectors
- Strategic SCRM planning
- Cybersecurity frameworks & monitoring tools