Third-party cyber incidents are surging — and the risks are closer than you think.
- David Roberts
- Sep 19
- 1 min read

According to a new iTnews report, NSW Government agencies have seen third-party linked cyber incidents quadruple in just two years. In 2023–24 alone, 17 incidents were tied back to external vendors and suppliers.
The message is clear: your organisation is only as secure as the weakest link in your supply chain.
What’s driving the risk?
Expanding reliance on cloud, SaaS, and external providers
Attackers exploiting indirect pathways into sensitive systems
Manual vendor reviews that can’t keep up with evolving threats
The solution isn’t more paperwork — it’s continuous, automated oversight. Using technology solutions allow organisations to: - Monitor vendor security posture in real time - Automate risk scoring and prioritisation of reviews - Maintain a live information asset register for full visibility of evolving risks and breaches
In today’s environment, trust must be proven through vigilance. Strong third-party risk management isn’t just compliance — it’s a cornerstone of protecting your data, reputation, and stakeholders.
How confident are you that your organisation has full visibility of third-party risks?
Comments