Cybersecurity Essentials for SME Supply Chain Management

In this practical, interactive workshop, you’ll learn how to identify cyber risks within your supply chain, reduce vulnerabilities across your organisation, and build a clear, actionable cyber-compliance plan. Designed specifically for SME leaders and managers, the session bridges digital tools with real operational improvements—helping you move toward more resilient, secure, and connected systems. We’ll explore common challenges, share real examples, and uncover opportunities for SMEs navigating today’s fast-moving digital business landscape.

What You’ll Learn

Key topics include:

• Why procurement has become a major cybersecurity risk area
• Common supply-chain threats: phishing, ransomware, insider threats, third-party access risks, and insecure/legacy systems
• Cybersecurity requirements in public and private procurement frameworks
• How to identify cyber risks in your own supply chain
• Overview of relevant frameworks, including:
• • Cyber Essentials & Cyber Essentials Plus
  • ISO 27001
  • GDPR and core data-protection principles
  • NCSC guidelines for SMEs
• What buyers look for in bids: evidence of controls, staff training, secure data handling, and incident-response planning
• Supplier vetting and due diligence (including cybersecurity questionnaires)
• Effective supplier onboarding and offboarding
• Managing access and credentials across your systems
• How to get started with Cyber Essentials
• Building staff awareness: policies, training, and day-to-day behaviours
• Essential protections: passwords, MFA, backups, patching, and endpoint security
• How to respond to an incident—and what to do when something goes wrong

Bonus for Participants:
This workshop will be delivered at the modern Teesworks Skills Academy, and will include a 15-minute overview of the major projects and activities underway across Teesworks—one of the UK’s most significant regeneration and low-carbon industrial development sites.

Who should attend

• SME owners, leaders, and IT managers
• Supply chain, procurement, and operations professionals
• Anyone responsible for digital systems, supplier management, or organisational resilience

Please note this event is funded via the Tees Valley Supply Chain programme and delivered by CyberWhite Ltd.

This is a closed event for programme beneficiaries only, and anyone new to the programme can sign up via the following link:

https://teesvalley-ca.gov.uk/business/supply-chain/

About Tees Valley Supply Chain

Tees Valley Supply Chain is delivered by RTC North on behalf of the Tees Valley Mayor and Combined Authority, and the Tees Valley Business Board.

If your business is based in Tees Valley (Darlington, Hartlepool, Middlesbrough, Redcar & Cleveland or Stockton-On-Tees), support is fully funded by the UK Government through the UK Shared Prosperity Fund. Support is conditional based on eligibility and suitability checks, and for one-to-one productivity support the completion of a diagnostic.