Why are we getting supply chain cybersecurity wrong?

Research has consistently shown that supply chain risk management is often late to new risks. It is part of human nature: we learn from experience and calibrate our risk tolerance based on what we know and what we have already faced. When a disaster occurs, companies respond, and they prepare for the next version of the same event. But what happens when the risk is something most supply chain teams have never confronted at scale? That is exactly where we stand today with supply chain cybersecurity.

Read the full article, published in the November/December 2026 issue of Supply Chain Management Review, attached as a PDF.