However, Your Cybersecurity Is Only as Strong as the Access You Give Others, even with strong cybersecurity controls.
Suppliers, consultants, and technology partners can still create another route into your systems.
Third parties may have access to your information; Your Cybersecurity Is Only as Strong as the Access You Give Others.
- Business applications
- Cloud platforms
- Microsoft 365
- Servers and networks
- Sensitive company data
- Administrative accounts
A supplier with weak cybersecurity can therefore become your cybersecurity risk.
NIST’s July 2026 Cybersecurity Supply Chain Risk Management guidance recommends carrying out due diligence on suppliers so organizations can make informed decisions before acquiring technology or granting access.
What Should You Check?
Before giving an external organization access to important systems, ask:
Who needs access?
Only identified and authorized individuals should receive access.
What do they need access to?
Do not provide access to the entire environment when one application is enough.
How are their accounts protected?
Require appropriate MFA and strong authentication.
How long is access required?
Temporary projects should not create permanent access.
What happens when the contract ends?
Accounts, remote connections and permissions should be removed.
Supplier Cybersecurity Checklist
✅ Assess suppliers before granting sensitive access
✅ Use individual accounts rather than shared credentials
✅ Require MFA
✅ Apply least-privilege access
✅ Monitor external access
✅ Include cybersecurity obligations in agreements
✅ Remove access when projects end
✅ Review critical suppliers periodically
NIST’s broader supply-chain guidance recommends identifying, assessing and mitigating cybersecurity risks associated with products and services throughout the supply chain.
How Junubia Host Can Help
Junubia Host can help Tanzanian organizations review:
- Supplier and contractor access
- Third-party administrator accounts
- Remote-access security
- Microsoft 365 external access
- Vendor risk
- Privileged access
- Security requirements for ICT suppliers
