Supply Chain & Third-Party Cyber Risk Fundamentals: sample practice worksheet

Fictional practice only. Use invented details; do not enter personal, client or confidential data.
This preview is not a completed assessment, legal opinion, audit or certification.

Exercise: Practical Exercise: A Supplier Incident Reaches Your Team
Assess a fictional payroll provider before onboarding, then respond to a service-disruption notice. Produce a dependency map, supplier questions and prioritised follow-up actions.

1. Describe the fictional organisation, process or system and its scope.

2. Identify three relevant risks or obligations. For each, record a control, owner and evidence you would request.

3. List assumptions, gaps and two questions to ask before relying on the result.

4. Propose one next action and explain how you would check that it worked.

Learning takeaway: A supplier cyber-risk screening worksheet and assurance follow-up checklist.

Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.

Programme: https://orbixtech.my/training-supply-chain-third-party-cyber-risk-malaysia