Supply Chain Risk Mitigation Must Be a Priority in 2025

This commentary argues that securing supply chains must be a 2025 priority, citing real-world tampering risks, foreign-made infrastructure concerns, and a surge in zero-day exploitation. It prescribes three focus areas: rigorous supplier validation (compliance with DORA/CRA/CNSA 2.0, PQC readiness, on-site audits, pentests, and secure-by-design), purposeful data exposure via zero-trust (least-privilege access, data aging/retention, pervasive encryption), and meticulous preparation under an assumption-of-breach (supply-chain-specific IR playbooks, realistic exercises, current vendor contact lists, and clear shutdown/containment procedures).