Member

Amendment 95B would require the report to explicitly assess the impact of supply chain and third-party dependencies on the resilience of regulated persons. The regime places duties on regulated entities to identify, assess and manage risks, including those posed by their supply chains, which will be strengthened by supply chain duties which we propose to include in the SRRs. Through the designated critical supplier measure, we will safeguard the cyber resilience of our essential services’ most critical suppliers.