Free e-learning to help you manage supply chain risks

Access free training modules on third-party cyber security risks

The National Cyber Security Centre (NCSC) has launched new e-learning packages that will help procurement specialists, risk owners and cyber security professionals to effectively manage risks across their supply chains.

The training consists of two modules. Both are free to use, and no login is necessary.

Module 1: Mapping your supply chain

The first e-learning module explores the what, why and how of supply chain mapping to help you improve your organisations cyber security.

Launch Module 1: Mapping your supply chain

Module 2: Gaining confidence in your supply chain

The second module describes the practical steps that organisations can take by looking at typical supplier relationships and the ways that may leave organisations exposed to vulnerabilities. It also looks at defining the expected outcomes and key steps to help you assess your supply chain's approach to cyber security.

Launch Module 2: Gaining confidence in your supply chain

The other way is to integrate the packages into your own organisation's training platform. You can do this by downloading the SCORM zip files from the NCSC website.

Understanding cyber risks associated with supply chains

Cyber attacks resulting from vulnerabilities within the supply chain can result in devastating, expensive and long-term ramifications for affected organisations, their supply chains and their customers.

But despite these risks, many companies lose sight of their supply chains. In fact, according to the government's 2023 Security Breaches Survey, just over one in ten businesses review the risks posed by their immediate suppliers (13%), and the proportion for the wider supply chain is half that figure (7%).

The new e-learning packages have been designed to accompany the NCSC’s existing guidance on mapping your supply chain and gaining confidence in your supply chain cyber security.

Combined, these resources are full of practical advice designed to empower businesses to effectively assess, gain confidence in, and maintain the cyber security of their supply chains.

First published 25 May 2023