22nd October 2025
Contributing to the Cybersecurity Resilience of critical Supply Chains: SupplHi joins Clusit
As a best-of-breed Supplier Management SaaS, SupplHi brings its experience and point of view to promote cybersecurity resilience across global supply chains, with a focus on empowering SMEs, the backbone of industrial B2B.
The digitalization of supply chains creates major opportunities for efficiency and collaboration, but also exposes organizations to new risks. Among these, cybersecurity is one of the most critical priorities to ensure business continuity and safeguard trust across the supply base.
That is why SupplHi has recently joined Clusit – the Italian Association for Information Security dedicated to advancing cybersecurity awareness, education, and standards.
This step reflects SupplHi’s ongoing commitment to addressing resilience in the supply chain, also through stimulating awareness with large Enterprises of Buyers and the SMEs that are the backbone of many supply chains.
About Clusit
Clusit Security is the main reference organization in Italy for promoting a culture of digital security and brings together over 700 member organizations from across Italy’s industrial and institutional landscape. Its membership spans companies that implement security solutions, technology providers, cybersecurity professionals, public authorities, and academic institutions.
Clusit also works closely with ministries, regulatory authorities, and other key stakeholders to drive awareness, education, and policy advocacy on cybersecurity issues.
The Challenge of Building Cyber-Resilient Supply Chains
According to the Clusit 2021 Report on ICT security in Italy and worldwide, there has been a sharp increase in cyberattacks exploiting supply chain vulnerabilities. This threat vector allows cybercriminals to target all parties involved in the chain – customers, suppliers, and third parties alike.
The report highlights several emerging or recently consolidated dynamics:
- the expansion of the attack surface;
- a shift in cybercriminal strategies, with attacks becoming simpler and increasingly directed at the weaker links in the supply chain;
- uneven levels of investment in cybersecurity, with large enterprises equipped with advanced tools, resources, and expertise, while SMEs remain underprotected due to limited budgets, lack of training, awareness, and sensitivity to the issue;
- the persistence of a cultural problem, as micro and small businesses wrongly believe they are not attractive targets, resulting in inadequate security measures compared to the current risk landscape.
The growing interconnection between organizations means that the weakness of a single link in the chain can grant attackers access to the data and networks of contractors and the entire supply chain.
The need for proper risk management is further demonstrated by numerous incidents caused by errors, negligence, or insufficient controls on the part of supply chain subcontractors, whose impacts often cascade to the end customer, with serious consequences for business continuity.
Given the significant challenges and inefficiencies in this area, Clusit has established a working group to develop a reference questionnaire. This tool is designed to support organizations of all types in the selection of ICT suppliers, products, and services by enabling a straightforward assessment of their information security/ICT security/cybersecurity posture. The questionnaire also allows suppliers to demonstrate compliance with applicable requirements, sector best practices, and the organization’s strategic objectives.
About SupplHi
SupplHi is the end-to-end and modular Supplier Management SaaS that covers, through a secure and compliant platform, all Supplier Management processes. Founded on efficiency and compliance, SupplHi is chosen by leading industrial players to manage processes such as Vendor Onboarding, Qualification, Risk Monitoring and ESG performance. Ensuring the protection of sensitive Vendor and Buyer data is a fundamental responsibility.
A strong Mutual Opportunity: SupplHi’s advantage and contribution to the Clusit network
Through Clusit, SupplHi will:
- Access dedicated, members‑only threat intelligence and guidance on emerging risks and security solutions.
- Collaborate through working groups and joint initiatives with leading companies, public‑sector entities, and universities.
- Advance cybersecurity awareness and best practices across our global network and stakeholders.
At the same time, as part of the Clusit Community, SupplHi contributes its unique perspective as best-of-breed Supplier Management SaaS with more than 10 years of expertise and data.
By including cybersecurity, compliance questionnaires and scoring model into Vendor Qualification, Onboarding and Risk Monitoring processes, SupplHi supports large enterprises and SMEs alike in improving resilience and being aligned with the latest international standards. Especially SMEs, representing the backbone of global B2B supply chains, are often the most exposed yet under-protected actors.
SupplHi’s membership in Clusit represents both a commitment and an opportunity: a commitment to contribute with its experience and data-driven perspective on cybersecurity in supply chains and an opportunity to access intelligence and best practices from Italy’s leading cybersecurity community.