The European Commission has unveiled a new ICT Supply Chain Security Toolbox, providing guidance for identifying, assessing, and mitigating cybersecurity risks across ICT supply chains. Developed by the NIS2 Cooperation Group with EU Member States and ENISA, the toolbox outlines risk scenarios and recommends measures such as assessing critical suppliers, adopting multi-vendor strategies, and reducing dependencies on high-risk providers.

Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security and Democracy, said: “Cyber-attacks on ICT supply chains are increasingly sophisticated… With the adoption of the Toolbox, we intensify our efforts to protect them by increasing our common understanding on risks and mitigation.”

The Commission’s release also includes cybersecurity risk assessments for connected and automated vehicles and border detection equipment, with a review of the Toolbox planned in one year.