--- title: Why Supply Chain Cybersecurity Is More Important Now Than Ever description: With the Cybersecurity Maturity Model Certification (CMMC) soon coming into effect, companies are once again taking time to scrutinize their supply chain cybersecurity plans, policies, and procedures. image: https://blog.sourceintelligence.com/hubfs/Cybersecurity%20(2).png --- ![shape background](https://blog.sourceintelligence.com/hubfs/raw_assets/public/Sourceintelligence_April2024/images/headertop.png) [ChainPoint and Compliance Map are now part of Source Intelligence](https://blog.sourceintelligence.com/tag/news) - [Source Academy](https://academy.sourceintelligence.com/?_gl=1*1gjeg4j*_ga*MTEwNzA5MDU1MS4xNzEzMzI4MDE3*_ga_X53KHMS0FW*MTcxMzMyODAxNy4xLjEuMTcxMzMzMzAyMS40OC4wLjA.) - [Careers](https://www.sourceintelligence.com/careers) - [Events](https://www.sourceintelligence.com/events) - [Contact](https://www.sourceintelligence.com/contact) - Log in - [Source Intelligence login](https://app.sourceintelligence.com/portico/?_gl=1*1obc0zd*_ga*MTEwNzA5MDU1MS4xNzEzMzI4MDE3*_ga_X53KHMS0FW*MTcxMzMyODAxNy4xLjEuMTcxMzMzMzAyMS40OC4wLjA.#/) - [Q-STAR login](https://qstar.qtec.us/Login/UserLogin.aspx) - [Parts Plus login](https://www.totalpartsplus.com/pp/login.asp) - [CMM login](https://profile.totalpartsplus.com/#/login?_k=d8cn30) [![Sourceintelligence](https://blog.sourceintelligence.com/hs-fs/hubfs/raw_assets/public/Sourceintelligence_April2024/images/headerlogo.png?width=526&height=180&name=headerlogo.png "Sourceintelligence")](https://www.sourceintelligence.com/) - Who we are - [About us](https://www.sourceintelligence.com/about) - [Our difference](https://www.sourceintelligence.com/our-difference) - Our solutions - [**C-Map solutions**](https://www.sourceintelligence.com/solution-overview) - Product compliance - [Overview](https://www.sourceintelligence.com/our-solutions/product-compliance) - [Global REACH](https://www.sourceintelligence.com/solution/global-reach) - [Global RoHS](https://www.sourceintelligence.com/solution/global-rohs) - [EU MDR](https://www.sourceintelligence.com/solution/eu-mdr) - [EU POPs](https://www.sourceintelligence.com/solution/eu-pops) - [Global PFAS](https://www.sourceintelligence.com/solution/pfas) - [Prop 65](https://www.sourceintelligence.com/solution/prop-65) - [SCIP](https://www.sourceintelligence.com/solution/scip) - [TSCA](https://www.sourceintelligence.com/solution/tsca) - Responsible sourcing - [Overview](https://www.sourceintelligence.com/our-solutions/responsible-sourcing) - [Audit Management](https://www.sourceintelligence.com/solution/audit-management) - [Minerals Reporting & Due Diligence](https://www.sourceintelligence.com/solution/conflict-minerals) - [EUDR](https://www.sourceintelligence.com/solution/eudr) - [Human Rights](https://www.sourceintelligence.com/solution/human-rights) - Sustainability - [Overview](https://www.sourceintelligence.com/our-solutions/sustainability) - [EPR](https://www.sourceintelligence.com/solution/epr) - Component Obsolescence - [Overview](https://www.sourceintelligence.com/our-solutions/parts-obsolescence) - [Obsolescence Management](https://www.sourceintelligence.com/solution/obsolescence-management) - [**ChainPoint solutions**](https://www.sourceintelligence.com/chainpoint-solutions) - Our platform - [Software](https://www.sourceintelligence.com/software) - [Managed Services](https://www.sourceintelligence.com/managed-services) - [Integrations](https://www.sourceintelligence.com/integrations) - Industries we serve - [Aerospace & Defense](https://www.sourceintelligence.com/aerospace-defense) - [Electronics](https://www.sourceintelligence.com/electronics-manufacturing) - [Industrial Manufacturing](https://www.sourceintelligence.com/industrial-manufacturing) - [Medical Devices](https://www.sourceintelligence.com/medical-device-manufacturing) - [Retail & Consumer Packaged Goods](https://www.sourceintelligence.com/retail-consumer-packaged-goods) - [Standards & Sector Initiatives](https://www.sourceintelligence.com/chainpoint-solutions) - [Resource center](https://blog.sourceintelligence.com/) [Schedule a demo](https://www.sourceintelligence.com/schedule-a-demo) - Who we are - [About us](https://www.sourceintelligence.com/about) - [Our difference](https://www.sourceintelligence.com/our-difference) - Our solutions - [**Cmap solutions**](https://www.sourceintelligence.com/solution-overview) - Product compliance - [Overview](https://www.sourceintelligence.com/our-solutions/product-compliance) - [Global REACH](https://www.sourceintelligence.com/product-compliance/global-reach) - [Global RoHS](https://www.sourceintelligence.com/product-compliance/global-rohs) - [Prop 65](https://www.sourceintelligence.com/product-compliance/prop-65) - [TSCA](https://www.sourceintelligence.com/product-compliance/tsca) - [SCIP](https://www.sourceintelligence.com/product-compliance/scip) - [PFAS](https://www.sourceintelligence.com/product-compliance/pfas) - [MDR](https://www.sourceintelligence.com/product-compliance/eu-mdr) - [POPs](https://www.sourceintelligence.com/product-compliance/pops) - Responsible sourcing - [Overview](https://www.sourceintelligence.com/our-solutions/responsible-sourcing) - [Conflict minerals](https://www.sourceintelligence.com/responsible-sourcing/conflict-minerals) - [Human rights](https://www.sourceintelligence.com/responsible-sourcing/human-rights) - [Deforestation](https://www.sourceintelligence.com/responsible-sourcing/deforestation) - [Raw materials traceability](https://www.sourceintelligence.com/) - [Audit management](https://www.sourceintelligence.com/responsible-sourcing/audit-management) - Sustainability - [Overview](https://www.sourceintelligence.com/our-solutions/sustainability) - [EPR](https://www.sourceintelligence.com/sustainability/epr) - Parts obsolescence - [Overview](https://www.sourceintelligence.com/our-solutions/parts-obsolescence) - [Obsolescence management](https://www.sourceintelligence.com/parts-obsolescence/obsolescence-management) - [**ChainPoint solutions**](https://www.sourceintelligence.com/chainpoint-solutions) - Industries we serve - [Aerospace & Defense](https://www.sourceintelligence.com/aerospace-defense) - [Electronics](https://www.sourceintelligence.com/electronics-manufacturing) - [Industrial Manufacturing](https://www.sourceintelligence.com/industrial-manufacturing) - [Medical Devices](https://www.sourceintelligence.com/medical-device-manufacturing) - [Retail & Consumer Packaged Goods](https://www.sourceintelligence.com/retail-consumer-packaged-goods) - [Standards & Sector Initiatives](https://www.sourceintelligence.com/chainpoint-solutions) - [Resource center](https://blog.sourceintelligence.com) - [Careers](https://www.sourceintelligence.com/careers) - [Contact](https://www.sourceintelligence.com/contact) - [Source Academy](https://academy.sourceintelligence.com) - Log in - [Source Intelligence login](https://app.sourceintelligence.com/portico) - [Q-STAR login](https://qstar.qtec.us/Login/UserLogin.aspx) - [CMM login](https://profile.totalpartsplus.com/#/login) - [Parts Plus login](https://www.totalpartsplus.com/pp/login.asp) [Schedule a demo](https://www.sourceintelligence.com/schedule-a-demo) ![](https://blog.sourceintelligence.com/hubfs/Cybersecurity%20(2).png) # Why Supply Chain Cybersecurity Is More Important Now Than Ever Published by [Source Intelligence](https://blog.sourceintelligence.com/author/source-intelligence) on February 19, 2020 at 6:37 PM   With the new California Consumer Privacy Act coming into effect, companies are once again taking time to scrutinize their Information and Data Security plans, policies, and procedures. Do I have the right measures in place? Am I doing enough to protect my customers’ data? [Supply chain cybersecurity](https://www.sourceintelligence.com/cybersecurity/) is set to become an important topic for businesses this year with new regulations like the Cybersecurity Maturity Model Certification (CMMC) rolling out. With the [EU GDPR](https://www.zdnet.com/article/gdpr-an-executive-guide-to-what-you-need-to-know/) and now [California’s CCPA](https://www.nytimes.com/2020/01/03/us/ccpa-california-privacy-law.html), there’s certainly a growing trend around the regulation and protection of data, just as the risks and attacks become more significant. Guidelines like the ones produced by the National Institute of Standards and Technology (NIST) - a government agency that develops technology, metrics, and standards - can help you understand and implement recommended security controls for information systems. In particular, there is the [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework) which is specifically designed to help organizations better understand and improve their management of cybersecurity risk.   ## Extending Cybersecurity To Your Supply Chain   But it’s not just the measures within your company that need review. What about the businesses you rely on for goods and services? The supply chain could be the hidden cybersecurity risk that you haven’t yet addressed. NIST predicts that **98% of manufacturers will experience a supply chain disruption** in the next two years, the majority of which will be caused by supply chain cybersecurity issues. Of the supply chain disruptions that have occurred in the past few years: [![supply chain cybersecurity disruptions](https://blog.sourceintelligence.com/hs-fs/hubfs/Imported_Blog_Media/Copy-of-Add-a-heading-3.png?width=679&height=355&name=Copy-of-Add-a-heading-3.png)](https://blog.sourceintelligence.com/hubfs/Imported_Blog_Media/Copy-of-Add-a-heading-3.png) This can be a critical issue, especially considering that **55%** of supply chain disruptions **cost over $25 million.** Companies in the aerospace and defense sector where government rules such as Defense Federal Acquisition Regulation Supplement (DFARS) require that companies meet the standard described by NIST 800-171.   ## The Cybersecurity Maturity Model Certification   While currently adherence to these standards does not require any certification, the US Office of the Under Secretary of Defense for Acquisition & Sustainment has just released the first version of a new [Cybersecurity Maturity Model Certification](https://www.acq.osd.mil/cmmc/) (**CMMC**). The aim of this new certification is to allow the DOD to assess and enhance the cybersecurity posture of the Defense Industrial Base (DIB). [![CMMC Calendar](https://blog.sourceintelligence.com/hs-fs/hubfs/Imported_Blog_Media/Add-a-heading-7.png?width=755&height=395&name=Add-a-heading-7.png)](https://blog.sourceintelligence.com/hubfs/Imported_Blog_Media/Add-a-heading-7.png) Version 1.0 of the CMMC is now available and unlike NIST SP 800-171, CMMC will implement multiple levels of cybersecurity. In addition to assessing the maturity of a company’s implementation of cybersecurity controls, the CMMC will also assess the company’s maturity/institutionalization of cybersecurity practices and processes. Companies will have some time to evaluate the requirements of the CMMC but they will not have the option to self certify.   ## How to Get Started With Supply Chain Cybersecurity   If you start now, you’ll have time to properly prepare for the upcoming change. So what's the first step? A readiness assessment will let you clearly understand the cybersecurity measures, policies, and procedures your company will need to get certified. With this readiness assessment, you’ll have an action plan you can get started on right away. The same assessment should be applied to your suppliers. Understanding your suppliers’ readiness level will help you understand the risks over which you don’t have direct control. At Source Intelligence, we make compliance easy. By engaging 24/7, we’re able to get you the data you need without creating stress on your suppliers. Our team of global regulatory experts has over 100 years of combined experience and ensures you are compliant and up-to-date on all the latest regulations. Our platform: - - Centralizes your supply chain - Automates data collection and document review - Uses supplier intelligence to mitigate risks - Allows you to gain internal collaboration - Provides the tools needed to easily manage your supply chain data - Generates dynamic reporting **See how our software takes the burden of cybersecurity compliance off your shoulders and allows you to focus on your core business functions by clicking on the button below!**   [![Request a Demo](https://no-cache.hubspot.com/cta/default/3926079/65572756-6694-44fc-8b43-80a25dbd0477.png)](https://cta-redirect.hubspot.com/cta/redirect/3926079/65572756-6694-44fc-8b43-80a25dbd0477) ### About the author #### Source Intelligence ![Source Intelligence](https://blog.sourceintelligence.com/hs-fs/hubfs/Icon_Logo%20(1).png?width=165&height=182&name=Icon_Logo%20(1).png) [Source Intelligence](https://www.linkedin.com/company/source-intelligence) is a leading provider of supply chain compliance software. It helps global manufacturers manage product compliance, responsible sourcing, and risk across complex supply chains. Its AI-powered, configurable SaaS platform connects supplier, product, and regulatory data to identify risk at the product, component, and material level. This delivers precise, defensible insights that support faster, more confident compliance decisions.   --- Tags: [Blogs](https://blog.sourceintelligence.com/tag/blogs) [Back to Blog](https://blog.sourceintelligence.com) ## Related Articles ## [Infographic: Why Vendor Cybersecurity Is The Next Big Supply Chain Topic](https://blog.sourceintelligence.com/infographic-vendor-cybersecurity) The issue of vendor cybersecurity isn't new, but awareness of the risk involved has been growing... [Read More](https://blog.sourceintelligence.com/infographic-vendor-cybersecurity) ## [What is the EU POPs Regulation?](https://blog.sourceintelligence.com/pops-regulation) The EU POPs Regulation bans or restricts persistent organic pollutants (POPs) from being produced... [Read More](https://blog.sourceintelligence.com/pops-regulation) ## [Regulatory Changes to Expect in 2026](https://blog.sourceintelligence.com/regulatory-changes-to-expect-2026) A practical look at regulatory compliance milestones in 2026 and how to prepare for supply chain... [Read More](https://blog.sourceintelligence.com/regulatory-changes-to-expect-2026) [![Sourceintelligence](https://blog.sourceintelligence.com/hs-fs/hubfs/raw_assets/public/Sourceintelligence_April2024/images/footerlogo.jpg?width=526&height=180&name=footerlogo.jpg "Sourceintelligence")](https://www.sourceintelligence.com/) [![linkedin](https://blog.sourceintelligence.com/hubfs/Sourceintelligence_April2024/Images/linkedin.svg)](https://www.linkedin.com/company/source-intelligence/)[![Facebook](https://blog.sourceintelligence.com/hubfs/Sourceintelligence_April2024/Images/634031940f60200db6b16855_Facebook.svg)](https://www.facebook.com/sourceintelligence/)[![twitter](https://blog.sourceintelligence.com/hubfs/Sourceintelligence_April2024/Images/twitter.svg)](https://twitter.com/SourceIntel?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor)[![instagram](https://blog.sourceintelligence.com/hubfs/Sourceintelligence_April2024/Images/instagram.svg)](https://www.instagram.com/source.intelligence/) - Who we are - [About us](https://www.sourceintelligence.com/about) - [Our difference](https://www.sourceintelligence.com/our-difference) - [Take the assessment](https://source-intelligence.webflow.io/our-difference) - Our solutions - [C-Map solutions](https://www.sourceintelligence.com/solution-overview) - [ChainPoint solutions](https://www.sourceintelligence.com/chainpoint-solutions) - Contact - [Schedule a demo](https://www.sourceintelligence.com/schedule-a-demo) - [Contact us](https://www.sourceintelligence.com/contact) - [Careers](https://www.sourceintelligence.com/careers) - - [Terms of Use](https://www.sourceintelligence.com/terms-of-use) - [Privacy Policy](https://www.sourceintelligence.com/privacy-policy) - [DMCA Policy](https://www.sourceintelligence.com/dmca-policy) - [Accessibility](https://www.sourceintelligence.com/accessibility) - - [Resource center](https://blog.sourceintelligence.com/?_gl=1*1u87auu*_ga*OTI5NzExNzMuMTcxMzMyNzY1OQ..*_ga_X53KHMS0FW*MTcxMzUyMzY1NS4zLjAuMTcxMzUyMzY1NS42MC4wLjA.) - [IPC Generator Tool](https://www.totalpartsplus.com/ipcgenerator) - [Subscribe to Newsletter](https://compliance.sourceintelligence.com/quarterly-newsletter-subscription?_gl=1*yd43gy*_ga*OTI5NzExNzMuMTcxMzMyNzY1OQ..*_ga_X53KHMS0FW*MTcxMzUyMzY1NS4zLjAuMTcxMzUyMzY1NS42MC4wLjA.) - [Source Academy](https://academy.sourceintelligence.com/)