This dependency increases the risk of business service outages, information security attacks and incidents, contractual non-compliance or disruption to the wider supply chain (“4th party risk”)! These can cause serious financial and reputational losses for your company, also, a more mature organisation can be more effectively attacked by a smaller, less security-conscious supplier!