# Contractors Strengthen Supplier Cybersecurity Controls

A CDOTrends article highlights growing cybersecurity exposure across supplier and subcontractor chains and unresolved accountability for security incidents, automated security actions, and customer exit from security platforms. It identifies no specific solicitation or award; the procurement concern is how organizations assign responsibility and preserve security capabilities across supplier relationships and provider changes.

- Procurement teams should map critical suppliers and dependencies to understand where supplier or subcontractor incidents could affect operations.
- Contracts and governance should define responsibility for incidents and boundaries for automated security actions.
- Organizations changing security providers should test how security data and controls can be transferred, reducing disruption during exit.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** November 09, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Infocomm Media Development Authority (IMDA)
- European Supervisory Authorities (ESAs)

### Vendors
- SentinelOne ()
- CrowdStrike ()

### Sources
- [Your Supplier Gets Hacked. Who Signs for the Damage? | CDOTrends](https://www.cdotrends.com/story/5173/your-supplier-gets-hacked-who-signs-damage) - CDOTrends