--- title: Kaspersky on how to secure a supply chain you do not control description: An overview of managing third-party and supply chain security risk across the full vendor lifecycle, from pre-contract vetting to offboarding. Recommends... canonical: https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Kaspersky on how to secure a supply chain you do not control | daily.dev og:description: An overview of managing third-party and supply chain security risk across the full vendor lifecycle, from pre-contract vetting to offboarding. Recommends... og:url: https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg og:image: https://api.daily.dev/og/posts/Myfjgjeyg.png og:image:alt: Kaspersky on how to secure a supply chain you do not control og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Kaspersky on how to secure a supply chain you do not control **[TechCentral](https://daily.dev/sources/techcentral)** · 6 min read · 0 upvotes · 0 comments ## Summary An overview of managing third-party and supply chain security risk across the full vendor lifecycle, from pre-contract vetting to offboarding. Recommends requiring ISO 27001/SOC 2 compliance, embedding security clauses in contracts, requesting source code reviews for critical vendors, continuous monitoring via XDR/EDR, annual audits with penetration testing, sandboxing vendor updates before deployment, and structured offboarding that revokes access and confirms data destruction. Cites a Kaspersky study finding supply chain attacks were the top threat companies faced and that only 37% of businesses embed security requirements into supplier contracts. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What percentage of businesses include IT security requirements in their supplier contracts? Only 37% of businesses embed IT security requirements into their supplier contracts, according to a Kaspersky report. This leaves the majority without written expectations for how third parties handle sensitive data, manage vulnerabilities, or respond to incidents, reducing predictable control over supplier security practices. _Teams weighing vendor risk policies can track supply chain security research and best practices on daily.dev._ ### What steps should a company take when offboarding a supplier to avoid security gaps? Offboarding should revoke all digital access and dismantle system integrations, including disabling accounts, API keys, single sign-on links, and VPN profiles, and removing any cloud resources the supplier deployed. It should also secure and retrieve all data, confirming deletion of corporate information, return of intellectual property, and formal destruction certificates. _Security teams building offboarding checklists can follow ongoing supply chain security coverage on daily.dev._ ## Similar posts on daily.dev - [How the enterprise supply chain has created a global attack surface](https://daily.dev/posts/how-the-enterprise-supply-chain-has-created-a-global-attack-surface-lamorlnbt) · IT Security Guru · 0 upvotes · 0 comments - [Retail Cyberattacks Reveal Hidden Weaknesses In Supply Chain Security](https://daily.dev/posts/retail-cyberattacks-reveal-hidden-weaknesses-in-supply-chain-security-bp7upgaih) · Security Boulevard · 0 upvotes · 0 comments - [What Good Software Supply Chain Security Looks Like](https://daily.dev/posts/what-good-software-supply-chain-security-looks-like-zfflaluhf) · The New Stack · 0 upvotes · 0 comments - [NIS2: Supply chains as a risk factor](https://daily.dev/posts/nis2-supply-chains-as-a-risk-factor-dxtkmfkri) · CSO Online · 0 upvotes · 0 comments - [Software Supply Chain Security: Key Findings from Omdia's 2026 Report](https://daily.dev/posts/software-supply-chain-security-key-findings-from-omdia-s-2026-report-vanlfniho) · Docker · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#kaspersky](https://daily.dev/tags/kaspersky) [View this post on daily.dev](https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Kaspersky on how to secure a supply chain you do not control","url":"https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg"},"datePublished":"2026-08-13T09:04:43.241Z","dateModified":"2026-08-13T09:05:08.872Z","description":"An overview of managing third-party and supply chain security risk across the full vendor lifecycle, from pre-contract vetting to offboarding. Recommends...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4e1f5dff26f786118d935e8cd1b977c0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4e1f5dff26f786118d935e8cd1b977c0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCentral","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCentral","logo":"https://media.daily.dev/image/upload/s--RsqLDZrL--/f_auto/v1717745297/logos/techcentral","url":"https://daily.dev/sources/techcentral"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,kaspersky","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCentral","item":"https://daily.dev/sources/techcentral"},{"@type":"ListItem","position":3,"name":"Kaspersky on how to secure a supply chain you do not control"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg#faq","mainEntity":[{"@type":"Question","name":"What percentage of businesses include IT security requirements in their supplier contracts?","acceptedAnswer":{"@type":"Answer","text":"Only 37% of businesses embed IT security requirements into their supplier contracts, according to a Kaspersky report. This leaves the majority without written expectations for how third parties handle sensitive data, manage vulnerabilities, or respond to incidents, reducing predictable control over supplier security practices. Teams weighing vendor risk policies can track supply chain security research and best practices on daily.dev."}},{"@type":"Question","name":"What steps should a company take when offboarding a supplier to avoid security gaps?","acceptedAnswer":{"@type":"Answer","text":"Offboarding should revoke all digital access and dismantle system integrations, including disabling accounts, API keys, single sign-on links, and VPN profiles, and removing any cloud resources the supplier deployed. It should also secure and retrieve all data, confirming deletion of corporate information, return of intellectual property, and formal destruction certificates. Security teams building offboarding checklists can follow ongoing supply chain security coverage on daily.dev."}}]} ```