# Public Sector Supply Chain Management

Risk Ledger is widely adopted across various public sector areas, including key government agencies like the HSA, police constabularies, City of London Police and the NHS. Many public sector bodies use Risk Ledger to stay on top of regulations and comply with the UK Cyber strategy.

## Be part of something bigger

When you join Risk Ledger you’re not only gaining access to supply chain management tools, you’re joining the Risk Ledger community. Collaborate with other CISOs, benchmark, learn and grow, understand what are best practices, exchange experience and knowledge and strengthen the community.

Join our defend as one network

.svg)

## Case Study

### How NHS achieved a better security posture but with less demand and resource

“Risk Ledger provides us with a more holistic, real time view of our complex supply chain, helping to identify and remediate potential vulnerabilities and issues early. The direct chat function helps forge better relationships with suppliers and provides a seamless way to discuss security and remediation activities with relevant stakeholders in a timely and efficient manner. The ability to extract valuable management information and metrics helps to ensure continuous improvement of supply chain management, adding value for both the client and our suppliers. Having confidence in the management of supply chain risk through Risk Ledger allowed us to achieve a better security posture but with less demand and resource.”

**David Malkin**  
Divisional Information Security Officer (DISO) for UKHSA  
[Read case study](/content/case-studies/nhs-test-and-trace/index.html)

### Get cybersecurity risk assessments done in hours not days

Risk ledger automates all the boring manual tasks in addition it acts as a centralised hub for when you have auditors/need to evidence something.

### Scale supplier coverage from 5% to 95%

Onboard your supplies in minutes, get more suppliers on, and spot more vulnerabilities at a fraction of the cost of other tools

### Map out your supply chain in minutes

Risk ledger automatically maps the connections across your third parties, fourth parties, nth parties. So you can spot and negate concentration risks, understand your supply chain when there’s a global incident.

### Illustrate compliance with the UK Cyber Security Strategy

Demonstrate operational resilience, continuously monitor your suppliers, minimise the impact of cyber security incidents and join our community to defend as one.

---

### FAQ

#### Can I ask my own questions?

You can use the discussion feature for any bespoke or follow-up questions for your suppliers. If you notice that a certain area or domain is not covered or needs more detail please let us know and we can look into expanding in the next update.

#### What if suppliers don't want to upload their security information onto the system?

We take security really seriously - any supplier that joins Risk Ledger has the opportunity to review us. We have strict data protection policies that everyone has to follow, sign terms and conditions which govern a two way relationship between us and the supplier.

#### Does Risk Ledger individually verify the info suppliers put on their profile?

We are a data pipe that sits between client and supplier, it's not up to us to decide what's good enough for you, however, the fact that supplier profiles are being reviewed by multiple clients means that the data is of a higher standard than most platforms. We can provide a fully managed service through one of our partners if required.

### Report

### Wondering where the greatest gap in your supply chain is?

Our latest report provides access to benchmarking data for your suppliers, quick wins for busy CISOs and a set of practical recommendations

[Download report](/content/resources/state-of-supply-chain-security-insurance/index.html)

## Reviews

### “As a user, the tool is already indispensable.”

### Excellent service from initial enquiry through the post-onboarding support

“The Risk Ledger Platform is easy to implement and includes a number of features to improve efficiency when monitoring supplier compliance”.

### A single source of information to share with multiple clients

“Once you’ve taken the time to answer all the questions, it is easy to share with all potential clients who require similar information”.

### Easy to use, collaborative and efficient

"It was easy to add colleagues to complete the different sections! Say goodbye to spreadsheets. It also had links if you were unsure of where to head with the questions which helped a lot".

### Supply chain assurance made easy

"One of the main advantages of Risk Ledger is that suppliers complete a single profile which they can then share with their clients on request. Suppliers benefit as they only have to do it once (besides regular updates obviously). Clients benefit too as other companies on Risk Ledger may have previously invited the same supplier which means it is already available as soon as they accept the connection requests".

### Great tool, that has transformed the way we cyber assess suppliers

"Easy to use and maintain cyber assessment tool, lots of great features including dashboards, reports, supplier discussions and notifications. Little push back from suppliers to complete assessments".
