Organisations increasingly depend on suppliers, software providers, cloud platforms and outsourced services that may introduce cyber risk outside direct organisational control. This course helps procurement professionals and contract owners ask better questions about supplier cyber resilience without requiring specialist technical expertise. It focuses on the practical relationship between procurement decisions, contractual oversight and operational dependency.

Participants examine supplier criticality, due diligence, assurance evidence, access, data handling, incident notification and continuity considerations. The course considers how assurance requirements should vary according to the importance and risk profile of the supplier rather than treating every vendor identically. Participants develop practical approaches for incorporating cyber considerations into procurement and ongoing supplier management.