As with most forms of cybersecurity, safeguarding against supply chain attacks involves understanding your business’s primary risks and addressing them through layered defenses encompassing people, process and technology. Organizations can audit supply chain partners’ security systems, helping to mitigate risks arising when both parties share access to business systems. Further, inbound supply chain phishing attacks can be limited through deeper inspection of email content and more effective employee security awareness training. Wider use of DMARC can help organizations resist more attacks that spoof their own identities.