[Heads Up] Reinforce Your Defenses Against Rising Supply-Chain Cyber Threats

Companies are intensifying third‑party risk oversight by enforcing stricter breach‑notification clauses, aligning with NIST best practices, and responding to new regulatory expectations from New York and the SEC, driven by high‑impact supply‑chain incidents like Change Healthcare and MOVEit. Firms such as JPMorgan Chase and Voya Financial are applying rigorous supplier guidelines and threat intelligence to improve transparency and resilience, though negotiating consistent contractual requirements remains a challenge.