What is supply-chain cyber risk for a small business?

Supply-chain cyber risk is the danger that reaches you not through your own systems but through a supplier, tool or contractor you rely on - when their breach becomes your problem:

• Through your software - a security flaw in a tool or plugin you use becomes a way into your data without anyone touching your network.
• Through your providers - your bookkeeper, IT support or web host holds your data, so their breach exposes it.
• Through trusted email - a hacked supplier account sends you a malicious invoice that sails past suspicion because you know the sender.
• What you can control - keep your software updated, limit what access each supplier really needs, and verify unexpected requests even from known contacts.

You inherit the security of everyone you depend on - pick suppliers who take it seriously, and give each one only the access they genuinely need.