https://gabrielhasik.com/ Cybersecurity, third-party risk, supply chain security, AI governance, regulatory resilience, and monitoring briefings by Gabriel Hasik. en Mon, 14 Sep 2026 00:00:00 +0200 https://gabrielhasik.com/tprm-briefing-september-2026.html https://gabrielhasik.com/tprm-briefing-september-2026.html Mon, 14 Sep 2026 00:00:00 +0200 CRA reporting, BGP-enabled update compromise, supplier API credentials, federated identity and cloud resilience, with practical control actions. https://gabrielhasik.com/geopolitical-supply-chain-risks-september-2026.html https://gabrielhasik.com/geopolitical-supply-chain-risks-september-2026.html Mon, 14 Sep 2026 00:00:00 +0200 Strait of Hormuz disruption, oil supply, UK Iran sanctions, trade momentum and rare-earth concentration translated into supply chain decisions. https://gabrielhasik.com/supplier-risk-is-a-data-problem.html https://gabrielhasik.com/supplier-risk-is-a-data-problem.html Mon, 14 Sep 2026 00:00:00 +0200 Supplier risk programs fail when supplier, service, evidence, ownership, and dependency data are fragmented across tools and spreadsheets. https://gabrielhasik.com/hidden-cost-of-vendor-questionnaires.html https://gabrielhasik.com/hidden-cost-of-vendor-questionnaires.html Mon, 07 Sep 2026 00:00:00 +0200 Why vendor questionnaires consume so much effort and how to redesign them around risk decisions rather than document collection. https://gabrielhasik.com/nis2-extended-supply-chain-small-supplier-risk.html https://gabrielhasik.com/nis2-extended-supply-chain-small-supplier-risk.html Mon, 31 Aug 2026 00:00:00 +0200 How NIS2 expectations cascade through supplier ecosystems and why small suppliers can create large cyber risk. https://gabrielhasik.com/from-checkbox-to-culture-third-party-risk-program.html https://gabrielhasik.com/from-checkbox-to-culture-third-party-risk-program.html Mon, 24 Aug 2026 00:00:00 +0200 A practical guide to building a third-party risk program that moves beyond questionnaires and creates real supplier risk governance. https://gabrielhasik.com/cybersecurity-board-problem-nis2-dora.html https://gabrielhasik.com/cybersecurity-board-problem-nis2-dora.html Sat, 01 Aug 2026 00:00:00 +0200 NIS2 and DORA move cybersecurity governance into the boardroom. Management teams need evidence that they understand cyber risk, supplier dependencies, resilience, and incident response. https://gabrielhasik.com/tprm-briefing-june-august-2026.html https://gabrielhasik.com/tprm-briefing-june-august-2026.html Sat, 22 Aug 2026 00:00:00 +0200 Software supply chain compromise, AI Act enforcement, DORA and UK critical third-party oversight, and vendor concentration risk. https://gabrielhasik.com/geopolitical-supply-chain-risks-june-august-2026.html https://gabrielhasik.com/geopolitical-supply-chain-risks-june-august-2026.html Sat, 22 Aug 2026 00:00:00 +0200 Red Sea escalation, EU Russia sanctions, rare earth concentration, Arctic shipping, and supply chain bottlenecks. https://gabrielhasik.com/Ai-Supply-Chain-Risk.html https://gabrielhasik.com/Ai-Supply-Chain-Risk.html Fri, 01 May 2026 00:00:00 +0200 AI has become one of the most concentrated and least-governed supply chains in the enterprise. https://gabrielhasik.com/supply-chain-is-now-the-biggest-cyber-threat.html https://gabrielhasik.com/supply-chain-is-now-the-biggest-cyber-threat.html Wed, 01 Apr 2026 00:00:00 +0200 Why supply chain compromise has become a primary cyber threat, with data, incident patterns, regulatory expectations, and practical controls.