{"id":54100,"date":"2025-12-19T07:52:08","date_gmt":"2025-12-19T07:52:08","guid":{"rendered":"https:\/\/www.intelligentcio.com\/apac\/?p=54100"},"modified":"2025-12-19T07:52:08","modified_gmt":"2025-12-19T07:52:08","slug":"bluevoyant-study-highlights-singapore-as-a-global-leader-in-third-party-cyber-risk-maturity-but-threats-continue-to-escalate","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/apac\/2025\/12\/19\/bluevoyant-study-highlights-singapore-as-a-global-leader-in-third-party-cyber-risk-maturity-but-threats-continue-to-escalate\/","title":{"rendered":"BlueVoyant study highlights Singapore as a global leader in third-party cyber risk maturity but threats continue to escalate"},"content":{"rendered":"\n

New BlueVoyant research finds Singapore\u2019s advanced programmes are not preventing the rise in vendor-related cyber breaches.<\/em><\/p>\n\n\n\n

Singapore organisations are demonstrating some of the strongest third-party cyber risk management (TPRM) maturity levels globally, according to BlueVoyant\u2019s sixth annual State of Supply Chain Defence<\/em> report.<\/p>\n\n\n\n

The report highlights Singapore as leading globally, with 60% of organisations surveyed reporting established or optimised third-party risk management (TPRM) programmes \u2013 nearly double the Asia-Pacific average.<\/p>\n\n\n\n

The findings position Singapore not only ahead of regional peers but outpacing US markets \u2013 traditionally the most mature globally.<\/p>\n\n\n\n

Despite strong maturity levels, Singapore organisations continue to face significant exposure, with 93% reporting negative impacts from a supply chain related cyber breach, a sharp rise from 70% in 2024. This increase may reflect both a growing volume of attacks and improved detection capabilities.<\/p>\n\n\n\n

As vendor ecosystems expand and operational dependencies deepen, the findings underscore that even the most mature programmes must continue to evolve to keep pace with ongoing supply chain threats.<\/p>\n\n\n\n

Key findings for Singapore<\/strong><\/p>\n\n\n\n

\u2022 High programme maturity:<\/strong> 60% of organisations report established or optimised TPRM programmes which are the highest in APAC and among the strongest globally.
\u2022 Frequent executive briefings:<\/strong> 32% brief senior leaders monthly or more, demonstrating the impact of leadership engagement, enabling faster response and stronger alignment across organisations.
\u2022 Persistent supply-chain impact:<\/strong> 48% experienced 2\u20135 breaches via third parties in the past year; 36% suffered one breach.
\u2022 Rising investment and outsourcing trends:<\/strong> Almost all (98% \u2013 up from 90% in 2024) of organisations plan to increase TPRM spending in the next 12 months, while 45% outsource analysis of data and results from monitoring.
\u2022 AI adoption building momentum:<\/strong> When it comes to AI, 64% identify this technology as best suited for continuous monitoring in the next year, recognising that automation will be essential for maintaining visibility as the attack surface expands.
\u2022 Ecosystems expanding:<\/strong> 67% expect their third-party networks to grow by 6\u201315%; 42% rely on outsourcing remediation and working with vendors on migration plans.<\/p>\n\n\n\n

\u201cAs one of the leading hubs for technology and innovation in Asia, Singapore continues to set the benchmark for advanced TPRM programmes,\u201d said William Oh, Head of Asia Pacific, BlueVoyant.<\/p>\n\n\n\n

\u201cBut this year\u2019s findings show that maturity alone doesn\u2019t guarantee protection. Even with the country\u2019s proactive approach, strong frameworks and sustained government\u2013industry collaboration, more than 56% of organisations experienced multiple third-party breaches.<\/p>\n\n\n\n

\u201cThe challenge has shifted from building these programmes to ensuring they operate effectively day-to-day amid expanding vendor ecosystems.\u201d<\/p>\n\n\n\n

\u201cAs supply chains grow more complex, tools and collaboration aren\u2019t enough on their own. Organisations need continuous visibility into vendor risk and leadership engagement that drives real accountability,\u201d Oh said.<\/p>\n\n\n\n

\u201cWe\u2019re seeing increased investment and strong momentum behind AI adoption, but the biggest gains come when third-party cyber risk becomes part of everyday business decisions not just a compliance exercise. That\u2019s where Singapore\u2019s most mature organisations are pulling ahead.\u201d<\/p>\n\n\n\n

The State of Supply Chain Defense Report provides a global benchmark for how organisations assess, monitor and remediate cyber risks originating from third-party vendors.<\/p>\n\n\n\n

The 2025 study was conducted by independent research firm Opinion Matters, surveying 1,800 C-suite leaders worldwide, including 300 respondents from Singapore. All respondents held responsibilities in cybersecurity, supply-chain oversight or enterprise risk across organisations with over 1,000 employees.<\/p>\n","protected":false},"excerpt":{"rendered":"

New BlueVoyant research finds Singapore\u2019s advanced programmes are not preventing the rise in vendor-related cyber breaches. Singapore organisations are demonstrating some of the strongest third-party cyber risk management (TPRM) maturity levels globally, according to BlueVoyant\u2019s sixth annual State of Supply Chain Defence report. The report highlights Singapore as leading globally, with 60% of organisations surveyed […]<\/p>\n","protected":false},"author":58,"featured_media":54101,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1463,3559,59,44],"tags":[9099,10579,2572,5074,10578,10215,10577,10580,10581,9467],"class_list":["post-54100","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apac","category-intelligent-technologies-cybersecurity","category-south-east-asia","category-top-stories","tag-ai-monitoring","tag-asia-pacific-cybersecurity","tag-bluevoyant","tag-cyber-defence","tag-cyber-risk-management","tag-singapore-cybersecurity","tag-supply-chain-security","tag-third-party-cyber-risk","tag-tprm","tag-vendor-risk"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/54100","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/users\/58"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/comments?post=54100"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/54100\/revisions"}],"predecessor-version":[{"id":54102,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/54100\/revisions\/54102"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/media\/54101"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/media?parent=54100"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/categories?post=54100"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/tags?post=54100"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}