By using publicly available data we can build a complete picture of the “risk” associated with your whole digital supply chain. ie The end-to-end technology infrastructure and data processing used to distribute goods or services. Similar to how companies are asked to comply with Anti Slavery directives across a supply chain we should be able to see how safe companies are to do business with by looking at cyber health across their supply chain. By doing so can mitigate against the risk of penalties that equate to as much as 4% of group turnover, equating to as much as 50% of annual profit (or more). Hence only measuring your levels of compliance will not satisfy regulators that you have taken sufficient reasonable measures to manage the risk. Likewise before investing in a company we might want to take a view on the whole organisation or group, not just one trading entity. Typically this could include Vendor Risk Management also. For more details: info@differentia.consulting