ISACA Report Uncovers Significant Supply Chain Security Gaps in India and Globally

  • June 16, 2022
  • News
ISACA Report Uncovers Significant Supply Chain Security Gaps in India and Globally
ISACA Report Uncovers Significant Supply Chain Security Gaps in India and Globally

June 15, 2022 - ISACA has just launched new global research results, Supply Chain Security Gaps: A 2022 Global Research Report that has divulged interesting threats and security gaps in the supply chain ecosystem globally. In India, just like many other developing economies, supply chain challenges have rocked both enterprises and consumers alike, making it harder to access certain goods and maintain business continuity. Increasing security threats have only heightened these concerns, and this ISACA survey report illuminates IT professionals’ key concerns around security challenges and how their organizations are responding to them. It received responses from more than 1,300 IT professionals with pressing supply chain insights. In the Indian market, the report findings cited the following supply chain risks as their key concerns:



Hardware with embedded malware


Third-party data storage


Compromised software


Software security vulnerabilities


Poor information security practices by suppliers


Third-party service providers or vendors with physical or virtual access to information systems, software code or IP


“To advance digital trust, there needs to be a level of confidence in the security, integrity and availability of all systems and suppliers,” says David Samuelson, ISACA CEO. “As we have seen from previous incidents, customers do not differentiate between an attack on an element of your supply chain and an attack on your own systems. Now is the time to take swift and meaningful actions to improve supply chain security and governance.”

Additionally, the ISACA report demonstrates concrete data on overall supply chain security gaps and behavioural pattern within organizations. Some of the most striking results have been listed below:

  • 87% of the respondents in India feel their organization’s leaders have sufficient understanding of supply chain risks compared to 70 percent globally.
  • About 56% indicate they have high confidence in the security of their organization’s supply chain
  • 60% have high confidence in the access controls throughout their supply chain.
  • Among all potential supply chain risks, 55 per cent of the respondents were concerned about ransomware threats
  • 73% believe that organization’s supply chain issues will improve while 24 percent feel it will remain the same
  • More than 1 in 5 organizations (21%) experienced attacks on digital supply chain in the last year
  • Almost 91% include cybersecurity and privacy assessments in their supplier assessment process
  • 83% feel organization’s supply chain need better governance than what is currently in place
  • A much higher percentage of organizations in India say their risk assessments include supply chain assessments for IoT devices (83% in India compared to 51% globally) and AI (60% compared to 39% globally), compared to organizations in other countries.

"Key stakeholders–private enterprises, governments, supply chain institutions, and other associated third-party vendors will need to work closely to eradicate crucial supply chain security gaps,” said R V Raghu, director at Versatilist Consulting India Pvt Ltd, and ISACA Ambassador. “It is imperative that there is a disclosure of open-source software components and threat and vulnerability analysis of key third parties involved and robust supply chain governance to ensure an effective IT supply chain security."

To read the full survey report and access additional resources on how organizations can enhance supply chain security and governance, visit the website. ISACA also offers additional publications on the topic, including the How to Manage Supply Chain Risk ebook, as well as cybersecurity resources here.


ISACA is a global community advancing individuals and organizations in their pursuit of digital trust. For more than 50 years, ISACA has equipped individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organizations, and build a more trusted and ethical digital world. ISACA is a global professional association and learning organization that leverages the expertise of its more than 150,000 members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 225 chapters worldwide. Through its foundation One in Tech, ISACA supports IT education and career pathways for under resourced and underrepresented populations.

Did you enjoy this great article?

Check out our free e-newsletters to read more great articles..