# Researchers Model Supply Chain Cyber Risk

An academic article published October 12, 2026, proposes a computational model for tracing cyber risk through multi-tier supply chains. Using synthetic networks and four operational states, it measures time-to-impact, cumulative exposure, volatility amplification, and recovery lag; simulations found that faster patching and targeted hardening improved resilience. The study offers a potential analytical approach for federal supply-chain risk professionals and contractors, but it does not announce a solicitation, award, or funded program, and it does not establish a government requirement.

- Procurement and supplier-risk teams can assess whether the model’s four metrics could help compare cyber-risk exposure and recovery across tiers of their own supply chains.
- Contractors may use the simulated findings to inform analysis of patching speed and targeted hardening, while treating them as research results rather than validated performance guarantees.
- The study uses synthetic networks; it does not identify a government adopter, a procurement vehicle, or a specific implementation opportunity.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** October 12, 2026

### Sources
- [A Multi-State Linear Influence Model for Cyber Risk Propagation in Supply Chains](https://www.mdpi.com/2079-9292/15/20/4672/pdf) - MDPI