Supply chain cyber security: what your organisation still owns when a supplier is breached

Supply chain cyber security: what your organisation still owns when a supplier is breached

When a supplier is breached, the problem doesn't stay with the supplier. You may still have customers to contact, regulators to notify and legal obligations to work through.

Our Chief Information Security Officer, Charles Mann, looks at three recent breaches that came through a supplier, and the questions he would put to every supplier with access to your systems or data.

Read the article

Read more briefings in the Cyber Brief.

Related news & insights

Weekly Cyber Brief: 9 November 2026

Weekly Cyber Brief: 9 November 2026

This week's three stories have something in common: systems many organisations rely on, but someone else looks after. ...

Why healthcare leads Australia's data breach notifications

Why healthcare leads Australia's data breach notifications

Health service providers made 149 of the 667 data breach notifications received by Australia's privacy regulator from January to June 2026, more than any other sector. ...

Firewall and VPN security: why attackers target the devices meant to keep them out

Firewall and VPN security: why attackers target the devices meant to keep them out

Firewalls and VPNs have to be reachable from the internet, and most can't run the security tools that watch laptops and servers. That makes them an attractive way in. ...

Get the Cyber Brief

Clear, practical updates on the cyber threats facing Australian businesses, and what to do about them. Sent every Tuesday morning.