{"id":22398,"date":"2026-11-12T20:38:31","date_gmt":"2026-11-12T20:38:31","guid":{"rendered":"https:\/\/supplychaintechnology.co.uk\/?p=22398"},"modified":"2026-11-12T20:38:31","modified_gmt":"2026-11-12T20:38:31","slug":"how-geopolitical-friction-is-redefining-cyber-resilience","status":"publish","type":"post","link":"http:\/\/www.supplychaintechnology.co.uk\/?p=22398","title":{"rendered":"How Geopolitical Friction Is Redefining Cyber Resilience"},"content":{"rendered":"

<\/p>\n

Hyperconnectivity underpins globalization and brings economies closer. Shared networks, cloud platforms and global supply chains are all but erasing geographical boundaries. But these digital threads are being exploited by nations to pursue rivalries, and organizations are getting caught in the crossfire.<\/p>\n

Geoeconomic confrontation is at the\u00a0forefront<\/a>\u00a0of the risks most likely to precipitate a global crisis. Security leaders must be prepared to operate in an environment that’s on a razor\u2019s edge, and build a resilience framework that addresses geopolitical risks.<\/p>\n

Cyber risk and the resultant resilience framework built to address it were always seen through a technical lens. The focus was on system vulnerabilities that needed to be patched. This approach still holds, but security teams now must ask themselves which geopolitical entity might want to disrupt their organization and for what purpose.\u00a0<\/a>For\u00a064%<\/a>\u00a0of organizations, geopolitics is firmly on the risk radar. What keeps them up at night is espionage and attacks that could take down critical infrastructure. Another reason for worry is that state-funded threat actors are patient. They’re not looking to smash and grab like cat burglars, but opting to establish long-term hooks that can infiltrate and disrupt at will. \u00a0<\/p>\n

The paradox of AI is that it’s becoming the key driver to reshaping cybersecurity and<\/em> the biggest enabler for creating fake content at scale and speed. Think of a fabricated statement or a cloned voice of a senior executive that can damage a company’s reputation within hours.<\/p>\n

Fraud is the more immediate problem. Scammers used an AI-cloned voice of\u00a0Ferrari<\/a>\u00a0CEO Benedetto Vigna to pressure an executive into helping with a supposedly confidential deal. The attempt failed only because the exec asked a personal question the impostor could not answer. Cases like this help to explain why many chief executives now worry about cyber-enabled fraud more than ransomware.<\/p>\n

There is increasing pressure on trade routes, courtesy tariffs, sanctions and export controls. Disruption in the\u00a0<\/a>Strait of Hormuz<\/a>\u00a0is forcing organizations to shift their sourcing. The resulting supply chains are longer and involve more intermediaries, leaving organizations with less visibility over whom they depend on. Third-party and supply chain vulnerabilities are becoming some of the biggest obstacles to cyber resilience.<\/p>\n

Another element of concern is a supplier’s changing risk profile. Overnight, a supplier can become high risk because of new sanctions, data localization rules, or pressure to share sensitive client information with the foreign partner.<\/p>\n

The fragmentation of the internet is reflected in countries building tightly controlled national networks. Globalization is giving way to protectionism. A case in point is China\u2019s\u00a0Data Security Law<\/a>, which bars organizations from transferring data to foreign law enforcement without government approval. Such laws are making cross-border investigations more difficult, and there is no doubt that criminal groups and state-backed actors will exploit these rules. With threat actors launching attacks with little fear of persecution, organizations will mostly fail to recover stolen funds and data.\u00a0<\/p>\n

Organizations in different countries have to follow different rulebooks, many of which are diverging. Some countries are tightening data and cyber laws, while others keep their rules comparatively relaxed. The problem is that you might want to operate in regions where protections are weaker, which lowers security costs, but then your data is exposed to greater risk.<\/p>\n

Another concern is compliance. With organizations needing to meet conflicting requirements, resources will be overly consumed in the process. This can reflect in a buildup of technical debt and unpatched systems.<\/p>\n

Preparing for this evolving threat landscape means building a resilience framework that views risk through a geopolitical lens:<\/p>\n