The incident at Colonial Pipeline in May 2021 is considered one of the most striking examples of how a digital supply-chain incident can have direct societal and economic impact. Colonial Pipeline operates the largest fuel pipeline network in the United States and transports approximately 45% of the fuel supply to the East Coast daily. When
Read moreThe incident at Kaseya in July 2021 is often cited as a classic example of a digital supply chain attack. However, conversations with executives and CISOs reveal that the impact and lessons have not always been fully understood. Kaseya is an American software company that provides management solutions to Managed Service Providers (MSPs). These MSPs,
Read moreAt the end of 2021, the world was confronted with one of the most significant cyber incidents of the past decade: the Log4j incident. What made this incident so remarkable was that it did not revolve around one organization or supplier, but around a small piece of software that was deeply embedded in countless applications
Read moreIn the summer of 2023, the world was shaken by a large-scale cyber incident involving MOVEit, a widely used solution for secure file exchange. What makes the incident special is not only its scale, but especially the insight it provided into how vulnerable digital supply chains are. For directors and CISOs of medium-sized organizations, this
Read moreCyber incidents are increasingly less confined to the boundaries of a single organization. The data breach at Nebu is a clear example of this. What began as a security incident at a relatively unknown software supplier quickly had a much broader impact. Not because it was technically so exceptional, but because the consequences became visible
Read moreThe Gap Between Compliance and Daily Practice Municipalities and public institutions are increasingly dependent on digital suppliers and service providers. These suppliers are part of constantly evolving chains, while risks often develop outside the organization itself. At the same time, requirements around oversight, accountability and compliance are increasing. This demands not only demonstrable control measures,
Read moreIntroduction Municipalities face the challenge of setting up their digital base in a solid and future-proof manner. The VNG Digital Agenda 2028 emphasizes the importance of having one’s “own house in order” in terms of digitization and information security. This goes beyond policy and rules; it requires insight, steering and continuous monitoring of risks and
Read moreIntroduction What happens when one of the world’s largest cloud providers suddenly goes down? The recent Cloudflare outage showed that millions of websites, apps and services were unreachable within minutes. For organizations, this is not just a technical incident – it shows how vulnerable digital supply chains are. This type of outage affects business continuity,
Read moreIntroduction The concerns in the Lower House about the American takeover of Solvinity – a supplier that provides services for DigiD – show how vulnerable our digital chains are. If a critical supplier suddenly falls into foreign hands, there is immediate risk around data access, legislation and continuity. For any organization that depends on cloud
Read moreArnhem, November 27, 2025. RiskStudio has officially joined Cyberveilig Nederland (CVNL), the trade association for cybersecurity companies. With this membership, RiskStudio strengthens its ambition to actively contribute to a safer digital Netherlands. “We want to contribute to making the Netherlands safer. Cyberveilig Nederland provides an excellent platform for this, allowing us to work together with
Read moreIntelligence Briefing
Ontvang wekelijks inzichten over digitale soevereiniteit, NIS2 en kritieke dreigingen.
PDF Export
Binnen 30 minuten ontvang je een helder pdf-rapport met feitelijke inzichten in de digitale supply chain en de soeveriniteit van jouw organisatie.
Rapport Aanvragen →