Success Story: Supply Chain Risk Management

Challenge

The customer is one of the largest food retail companies in Israel and active in more than 20 countries abroad. The company has thousands of suppliers its systems.

These many 3^rd party interfaces are posing constant risk of cyber-attacks, with potential harm to the company’s financial assets, reputation and sensitive information of its customers.

The customer has decided to mitigate this risk, by standardizing the cyber security policy that its suppliers will have to comply with.

The size of the organization, and the huge scale of activity, required unique expertise and end-to-end management of the process, communicating with each supplier, testing relevant systems and producing a detailed report of found gaps.

Solution

We offered the customer its Supply Chain Risk Management service, based on a deep review of the suppliers’ cyber security defenses.

The vetting process includes these phases:

• Interviewing the supplier regarding its systems/products and building a custom questionnaire (out of 300 possible questions) to collect the relevant data. then guiding the supplier through the process of filling the questionnaire.
• Testing the systems/products to identify vulnerabilities. Results are shared in a follow-up review with the supplier.
• A detailed report listing the gaps found as well as recommendations, is delivered to the customer and the supplier.

Results

Within few months, we have vetted 25 suppliers, some in a very short time- frame. We have saved the customer considerable amount of time investment and drastically reduced the risk of theft, information leaks and other damages.

The customer relies on our analysis and reports to understand the status of each supplier’s cyber security measures and whether or not to continue working with them, depending on their compliance with the customer defined cyber security standards.