In a world where cyberattacks are increasingly frequent, with a data breach occurring every 39 seconds globally, cybersecurity has become a critical priority for businesses. Gianluca Sammarchi, manager at Implementa Group, highlights that supply chains often represent the weakest link in corporate defense. Small and medium enterprises (SMEs), which are integral to these supply chains, frequently lack robust cybersecurity processes, leaving the entire network exposed.
The NIS2 directive mandates strict controls on supply chains to ensure compliance with security regulations. As a result, large corporations now require their suppliers to complete detailed questionnaires and demonstrate effective cybersecurity measures. Sammarchi stresses that cybersecurity should be treated as an integrated process that involves all company departments and employees, moving away from the outdated view of it as a standalone product or function.
Maintaining an adequate level of security is complex, as evidenced by the alarming frequency of data breaches. To address these challenges, businesses must adopt a holistic approach to cybersecurity, involving not only the core organization but also every part of its supply chain. A close collaboration and the sharing of best practices among partners are essential to significantly reduce the risks posed by cyberattacks.