Work

Strengthening the UK regulatory framework: Enhancing cybersecurity in supply chains

Year: 2025

Type: article

Abstract: The increasing risks associated with cybersecurity in global supply chains present a significant problem, threatening the operational integrity and security of organisations on a global scale. The UK’s Network and Information Systems (NIS) Framework, although fundamental in cybersecurity regulation, has significant gaps in effectively addressing the complexities of contemporary global supply chain architectures entangled with quickly advancing cyber threats. In this work, we analyse the UK NIS framework, identify key gaps, and propose solutions drawn from other existing frameworks, e.g., US NIST, EU NIS2. We base this analysis on a comparative evaluation using defined criteria related to supply chain coverage, adaptability, and risk management specificity. We enhanced the cybersecurity in supply chains by proposing novel security requirements plans for each risk profile. Furthermore, we examined various solutions for risk assessments and self-risk assessments for supply chain security. We analysed practical risk assessment approaches, including self-assessment strategies, particularly suited for SMEs. Moreover, we investigated the contracting between supply chains in the context of data and information sharing.

Source: International Journal of Information Management Data Insights

DOI: 10.1016/j.jjimei.2025.100370

Authors: Betul Gokkaya, Konstantina Spanaki, Erisa Karafili

Institutions: University of Southampton, Audencia Business School

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

SDGs: Industry, innovation and infrastructure, Peace, justice, and strong institutions

Open Access status: gold

Estimated APC paid: $2,190