Third-Party & Supply Chain

The Hidden Layer of Third-Party Risk: Why Your Vendors’ Vendors Are Now Your Weakest Link

If 2024 reminded us of anything, it’s that the threat landscape never stands still. In every breach headline, there’s a familiar pattern: an organization falls not because of its own failure, but because a trusted partner left a back door open.

New York Issues Fresh Cybersecurity Guidance on Third-Party Risks

As financial institutions continue to lean on an expanding universe of cloud, fintech, and AI providers, New York’s financial regulator is reminding them that outsourcing doesn’t mean offloading responsibility.

EU Moves to Ease EUDR Reporting Burdens While Keeping Core Safeguards Intact

‍The European Commission is moving to fine-tune the EU Deforestation Regulation (EUDR), aiming to lighten the reporting load on smaller players and stabilize the IT backbone that underpins one of the world’s most ambitious supply-chain laws.

EU Recognizes First Supply Chain Due Diligence Scheme Under Conflict Minerals Regulation

European importers of tin, tungsten, tantalum, and gold will soon have an easier path to compliance after the European Commission recognized the first supply chain due diligence scheme under the EU’s Conflict Minerals Regulation.

ASIC Sounds Alarm on Outsourcing Risks After Review Exposes Governance Gaps

Australia’s financial watchdog has issued a pointed warning to licensees relying on offshore service providers, urging stronger oversight and risk management after a review uncovered governance shortfalls that could leave consumers and investors exposed.

AI Agent vs. Brown Envelope: The Balkan Supply Chain Cage Match

In this article, Jason Busch unpacks Albania’s bold experiment to fight procurement corruption with an AI “minister,” weighing its potential to trim graft against the country’s deep-rooted traditions of bribery, backroom deals, and bureaucratic stalling.

The TPRM Wake-Up Call: Why 2025 Demands Excellence and Investment Despite Uncertain Returns

The numbers don’t lie. 96% of S&P 500 companies have experienced data breaches. 41.8% of fintech breaches can be traced back to third-party vendors. 68% of UK fintechs report rising fraud cases, with losses reaching as much as £5 million.These aren’t isolated incidents; they are symptoms of a systemic issue. As organizations become more reliant on third-party ecosystems, the costs of insufficient Third-Party Risk Management (TPRM) have never been greater.