The High Cost of Not Knowing Your Critical Suppliers: Lessons from MOVEit and the upcoming critical third parties regime

MOVEit was a wake-up call. The widespread impact of the breach highlighted how a single point of failure in the supply chain can lead to massive ripple effects — especially when that supplier is critical to operations.

Now, with new regulations like the UK’s Critical Third Parties Regime and the Digital Operational Resilience Act (DORA) raising the bar for third-party risk management, it’s no longer enough to just assess suppliers once a year — organisations must know who their most critical suppliers are and continuously monitor them.

In this session, we’ll explore:

• What went wrong in the MOVEit breach — and what it revealed about supplier dependencies.
• What defines a critical third party — and how to identify yours.
• What the UK’s Critical Third Parties Regime and other regulations mean for your TPRM strategy.
• How to move from static assessments to proactive, collaborative supply chain security

Key takeaway: With Risk Ledger, you can identify your critical suppliers, monitor them continuously, and collaborate directly to drive meaningful security improvements across your supply chain.