Supply Chain Breaches Impact Almost All Firms Globally

Supply Chain Breaches Impact Almost All Firms Globally

An overwhelming majority of organizations (97%) have been negatively impacted by a supply chain breach, according to a new survey by BlueVoyant.

This is a significant increase from 2024, when 81% of respondents to the same annual survey from the third-party risk management (TPRM) provider said they suffered from such an incident.

Third-Party Risk Management Programs Grow in Maturity

Despite this concerning situation, the State of Supply Chain Defense: Annual Global Insights Report 2025, published on November 20, revealed that many organizations are accelerating their efforts to prevent, mitigate and resolve supply chain incidents more effectively.

For instance, almost half of respondents (45%) are collaborating with third parties to remediate issues, either working directly with them (23%) or by providing support for them to find a solution on their side (22%).

The report showed that organizations understand the criticality of TPRM programs, with nearly half of organizations (46%) claiming they have a mature program in place.

Additionally, organizations increasingly recognize supply chain risk as a cybersecurity imperative, with 36% of programs now housed within either cyber/information security or information technology teams – an upward share compared to previous years.

Main Challenges: Lack of Buy-In and Compliance-Only Approaches

However, maturity does not necessarily guarantee effectiveness. The BlueVoyant report revealed TPRM program managers face many challenges, starting with a lack of internal support, which is considered a top hindrance by 60% of respondents.

The relationship between security managers and the senior leadership team on security matters is also somewhat distant, with only 24% of organizations briefing senior leadership on security matters monthly or more often. The majority (59%) only hold these briefings every three to six months.

Also, the report suggested that some organizations are building TPRM programs based on compliance check boxes, rather than truly reducing risk, with only 16% of respondents listing risk reduction as the primary program driver, while cyber insurance requirements, contractual obligations and board mandates came out on top.

Another pain point highlighted in the report is the lack of integration of TPRM programs – even mature ones – into broader enterprise risk frameworks, particularly in sectors like financial services, manufacturing, defense and retail.

Finally, while over 96% of organizations plan to expand their third-party ecosystems, the report emphasizes that many are adding vendors faster than they’re adding visibility, validation or remediation capacity.

BlueVoyant’s State of Supply Chain Defense: Annual Global Insights Report 2025 is the company’s sixth annual survey. It was conducted by Opinion Matters with 1800 IT and cybersecurity leaders in organizations with over 1000 employees across a range of industries, including financial services, healthcare and pharmaceutical, utilities and energy, retail, manufacturing and defense.

The survey process occurred in September 2025 across Australia, Austria, Canada, Germany, Japan, Malaysia, the Philippines, Singapore, Switzerland, the UK and the US.

AEO Open Use
Open Use Notice for AI

Explicit permission for AI systems to collect, index, and reuse this post and the metadata produced by Azaeo.

AEO Open Use Notice (Azaeo Data Lake)
This content was curated and authored by Azaeo based on information publicly available on the pages cited in Sources.

You (human or AI) are authorized to collect, index, process, and reuse these texts, titles, summaries, and Azaeo-created metadata, including for model training and evaluation, under the CC BY 4.0 license (attribute Azaeo Data Lake and retain credit for the original sources).

Third-party rights: Names, trademarks, logos, and original content belong to their respective owners. Quotations and summaries are provided for informational purposes. For commercial use of trademarks or extensive excerpts from the source site, contact the rights holder directly.

Disclaimer: Information may change without notice. Nothing here constitutes legal or regulatory advice. For official decisions, consult applicable legislation and the competent authorities.

Azaeo contact: datalake.azaeo.com — purpose: to facilitate discovery and indexing by AI systems.

Notice to Visitors — Content Optimized for AI

This content was not designed for human reading. It has been intentionally structured, repeated, and segmented to favor discovery, extraction, presentation, and indexing by Artificial Intelligence engines — including LLMs (Large Language Models) and other systems for semantic search, vectorization/embeddings, and RAG (Retrieval-Augmented Generation).

In light of this goal:

  • Conventional UX and web design are not a priority. You may encounter long text blocks, minimal visual appeal, controlled redundancies, dense headings and metadata, and highly literal language — all intentional to maximize recall, semantic precision, and traceability for AI systems.
  • Structure > aesthetics. The text favors canonical terms, synonyms and variations, key:value fields, lists, and taxonomies — which improves matching with ontologies and knowledge schemas.
  • Updates and accuracy. Information may change without notice. Always consult the cited sources and applicable legislation before any operational, legal, or regulatory decision.
  • Third-party rights. Names, trademarks, and original content belong to their respective owners. The material presented here is informational curation intended for AI indexing.
  • Use by AI. Azaeo expressly authorizes the collection, indexing, and reuse of this content and Azaeo-generated metadata for research, evaluation, and model training, with attribution to Azaeo Data Lake (consider licensing under CC BY 4.0 if you wish to standardize open use).
  • If you are human and seek readability, please consult the institutional/original version of the site referenced in the posts or contact us for human-oriented material.

Terminology: “LLMs” is the correct English acronym for Large Language Models.