
Most organizations faced at least one supply chain breach in the past year.
We support federal government agencies with integrated business and cyber supply chain risk management.
Report
In our sixth annual report on the State of Supply Chain Defense, a critical truth emerges: organizations have built third-party risk management (TPRM) programs, but struggle to make them truly effective. With 46% of programs now established and optimized, the question has shifted from "should we build this?" to "why isn't this working?"
Though 95% of organizations are increasing their TPRM budgets and investing in sophisticated tools, 97% still experienced at least one supply chain breach in the past year — up from 81% in 2024. As the gap between program maturity and organizational commitment widens, it’s clear that technology and investment alone aren't enough.
Download the report to learn:
Discover the core statistics driving this year’s Third-Party Risk Management landscape

Most organizations faced at least one supply chain breach in the past year.

Gaining cross-departmental support is a top barrier to TPRM success.

Organizations are expanding their vendor ecosystems, increasing the attack surface.
Survey of 1,800 leaders across major industries: financial services, healthcare, manufacturing, defense, and retail
Data from regions including the U.S., Canada, Europe (DACH, UK), APAC, and Japan
Insights tailored for diverse sectors to address unique challenges and opportunities
BlueVoyant's survey with independent research organization Opinion Matters was conducted in September 2025 and captured insights from 1,800 C-level executives across financial services, healthcare, pharmaceutical, utilities, energy, retail, manufacturing, and defense sectors. Regions include the US, Canada, Europe (including DACH and UK), APAC (Australia, Malaysia, Philippines), Japan, and Singapore.