ICT supply chain risk management

Roughly 80% of global cyberattacks occur through supply chains according to American National Institute of Science and Technology (NIST). Due to these developments, the Dutch National Cyber Security Center (NCSC) assigned TNO to conduct an exploratory research in the field of ICT supply chains. The research indicated that Dutch organizations have different views of ICT supply chain risks and that their views concerning the ICT supply chains themselves intermingle due to the great complexity of digital chains. A complete framework of the ICT supply chain risks is missing and, based on the results of the analysis, TNO was able to identify several key elements, which allowed to map the risks in an organized manner.