Every Link Matters: The State of Supply Chain Security 2026  —
US Edition

Shift from reactive Vendor Risk Management compliance to Active Supply Chain security, satisfy tightening SEC and board mandates, and turn your resilience into a strategic business advantage.

Supply chain security in the United States has reached a pivotal moment. As high-profile breaches expose vulnerabilities deep within vendor networks, organizations are realizing that their defenses are only as strong as the weakest links in their supply chains.

This report, based on insights from 1,000 US CISOs and risk leaders, reveals a critical gap between recognition and capability: while security leaders know they need extended supply chain visibility beyond their immediate third parties,

most are still operating in the dark regarding their fourth and nth-party risks.

Download the full report to explore the key data trends shaping the US market:

  • The Executive Mandate: 42.1% of organizations now rank Third-Party Risk Management (TPRM) as a critical board-level priority.
  • The Visibility Gap: Despite the high stakes, 51.4% of CISOs admit their organizations lack the ability to monitor risks beyond their direct, first-tier suppliers.
  • The Downstream Threat: The cost of this blind spot is real—in 2023 alone, 68% of CISOs in regulated industries experienced a supply chain incident that originated beyond their direct suppliers.

Download the Report today.

National Health Service
BAE Systems
British Airways
Telenor
UK Power Networks
Beazley
Civil Aviation Authority
Village Hotels
SGN
Succession Wealth
Admiral
First Sentier Investors
Welsh Water
United Utilities
Simply Business
Times Higher Education World University Rankings
City Fibre
Go Ahead
Pennon
Govia Thameslink Railway
Allica Bank
Schroders Personal Wealth
Anglian Water
Octopus Investments
Gnatta
Synectics Solutions
PR Gloo
UK Health Security Agency
Manchester Police
Department for Environment & Rural Affairs
Grant Thorton
Police Digital Service
Cheshire Constabulary
Westminster Council
Southern Water
Yorkshire Water
Portsmouth Water
Thames Link
Upvest
Crowe
Zenseact
National Health Service
BAE Systems
British Airways
Telenor
UK Power Networks
Beazley
Civil Aviation Authority
Village Hotels
SGN
Succession Wealth
Admiral
First Sentier Investors
Welsh Water
United Utilities
Simply Business
Times Higher Education World University Rankings
City Fibre
Go Ahead
Pennon
Govia Thameslink Railway
Allica Bank
Schroders Personal Wealth
Anglian Water
Octopus Investments
Gnatta
Synectics Solutions
PR Gloo
UK Health Security Agency
Manchester Police
Department for Environment & Rural Affairs
Grant Thorton
Police Digital Service
Cheshire Constabulary
Westminster Council
Southern Water
Yorkshire Water
Portsmouth Water
Thames Link
Upvest
Crowe
Zenseact
Network Trace

What you will learn in this report

Confronting the 4th-Party Blind Spot

Discover why the "long tail" of indirect suppliers has become the most dynamic area of risk exposure and how to identify the hidden dependencies that traditional TPRM overlooks.

Transitioning to Active Supply Chain Security

Learn the structured framework for moving beyond static, "tick-box" compliance toward a model of continuous monitoring and automated threat intelligence that delivers real-time resilience.

US CISO Investment Priorities for 2026

Gain insight into where your peers are directing their budgets, with data showing that 54.3% of leaders are prioritizing enhanced supply chain visibility and 51% are investing in real-time monitoring solutions.

Trapezoid
Pattern Trapezoid Mesh

Defend your supply chain with Risk Ledger.