Cyber supply chains

Your cyber security is only as strong as your supply chain’s

In today’s interconnected environment, the cyber security of your supply chain is critical. Most organisations rely on external suppliers, manufacturers, distributors, contractors or retailers. These relationships are key to doing business. They can also create cyber security risks for your organisation if business partners have weak cyber security. Managing these risks is an important part of protecting your organisation. Understand your supply chains and set clear cyber security rules. Control access to systems, data and services. Support suppliers to follow good security practices.

Reducing cyber risk across supply chains

Hear from the Australian Signals Directorate's Head of the Australian Cyber Security Centre, Stephanie Crowe, on the importance of cyber supply chain risk management.

Identify and manage supply chain risks

Understand cyber supply chain risks and learn how to assess suppliers and choose secure, verifiable technologies.

Managing cyber supply chains

Learn how to manage cyber supply chain risks by setting clear security rules, checking suppliers and monitoring third-party services.

Identifying cyber supply chain risks

Learn to identify cyber supply chain risks by understanding your systems, checking your suppliers, and spotting weak points across your services.

Choosing secure and verifiable technologies

Learn how to select secure and verifiable technologies that reduce cyber risks and help build reliable systems.

Manage risks from service providers

Learn how organisations and managed service providers can reduce security risks and protect customer networks.

How to manage your security when engaging a managed service provider

Protect your organisation when using service providers by setting clear security expectations, managing access controls and monitoring their activity.

Managed service providers: How to manage risk to customer networks

Managed service providers should manage cyber risks by securing access, protecting systems and strengthening trust with customers.

Questions to ask managed service providers

Learn what questions to ask a managed service provider to understand the cyber security of its systems and services.

Improve software supply chain transparency

Access guidance on software transparency and managing supply chain risks in software, artificial intelligence and machine learning systems.

2026 Minimum Elements for a Software Bill of Materials (SBOM)

Improve software supply chain visibility with a Software Bills of Materials (SBOMs) to identify dependencies and better manage cyber security risks.

A Shared Vision of Software Bill of Materials (SBOM) for Cybersecurity

Use a Software Bill of Materials (SBOM) to list software components, libraries and dependencies in software, to manage vulnerabilities and supply chain risks.

Artificial intelligence and machine learning: Supply chain risks and mitigations

Learn how to identify artificial intelligence and machine learning supply chain risks and apply practical security measures to reduce them.

What are you looking for?

Stay secure

Guidance

Resources

Access publications and alerts

Publications

Alerts, advisories and reports

Recover from a cyber incident

How to recover

Where to get help

Submit a report

Report an issue

Regulatory reporting

What we do

About us

News and programs