Join our series of events, ScotlandIS Tech Tidbits, on the first Tuesday of every month!

These 30 minute webinars will be short, informative sessions on a variety of topics, from exporting to cybersecurity, cloud computing to procurement, and many more.

Each event will feature a ScotlandIS member offering their expert insights and advice on the topic in hand, however you do not need to be a member to attend these talks.

For September we’ll be joined by David Beardshaw, CISO and Cyber Security lead at 3VRM.

Supply chain risk now regularly features as a mainstream news item. While cyber security is only one element of this, events at Jaguar Land Rover and M&S (among others) have reinforced the importance and impact of supply chain risk management.

From a Third Party Risk Management (TPRM) perspective, the challenge of ensuring the cyber security and resilience of supply chains has never been more critical. Organisations of all sizes – and in all sectors – are increasingly recognising this and want to strengthen their risk management in response.

Nevertheless, “Despite an increasing trend in supplier-based breaches, just 14% of UK businesses reviewed the cyber risk of their immediate suppliers in the last 12 months”. (NCSC Annual Review 2025, “It’s time to act”). Whether acting as a ‘buyer’ managing their own supply chain or as a ‘supplier’ responding to due diligence from their (potential) clients, organisations will need to act to strengthen their TPRM for the future.

This presentation aims to help by providing an overview of cyber threats in the supply chain, a framework for effective Third Party Risk Management and by sharing relevant insights and examples.