Your next cyber incident may not start with you, it may start with your supplier.
As startups and SMEs become more interconnected, third-party risk has quietly become one of the fastest-growing causes of breaches, lost deals, and operational disruption. Yet most organisations have no dedicated security team watching the gaps.
In less than 30-minutes, we break down what every startup, scale-up, and growing SME needs to know about supplier risk in 2025 and how to manage it without the budget or headcount of a large enterprise.
Speakers:
- Mike (Speaker)
- Shelley (Speaker)
- Jonathan Wood, Moderator – Founder of Muse Cyber
What You’ll Learn
1. When Your Supplier Gets Hacked, You Get Burned
Attackers increasingly target the weakest link in the chain — often a SaaS provider, outsourced IT team, or cloud platform you rely on. We’ll unpack why this shift is happening and what recent UK incidents mean for smaller organisations.
2. How to Build Third-Party Resilience Without a Big Security Function
Most SMEs don’t need a full CISO to get the basics right. You’ll learn practical steps for:
- Knowing which suppliers actually matter
- Asking the right questions (without drowning in forms)
- Understanding which evidence buyers will ask YOU for
- Reducing dependency on vendors with weak controls
3. Turning Third-Party Risk Into a Competitive Advantage
Supplier security is no longer just a compliance box, it’s a deal enabler. We’ll discuss how strong vendor management helps:
- Win enterprise contracts faster
- Improve due-diligence outcomes
- Demonstrate operational maturity to investors and partners
- Protect revenue when incidents occur
4. What Buyers Expect in 2025
From continuous monitoring to cultural maturity, security questionnaires are becoming more demanding. We’ll outline the new expectations founders and operators need to be ready for.
Who This Webinar Is For
This session is designed for leaders who carry risk but don’t have a full-time security team, including:
- Founders & CEOs
- CTOs & COOs
- CFOs & Heads of Operations
- Heads of Compliance
- Partnerships & Commercial Leads
- Legal Counsel & GRC teams
- Venture investors supporting portfolio resilience
If your business depends on SaaS tools, outsourced IT, cloud platforms, or integrated partners, this applies to you.

