The industrial supply chain is the network of suppliers, parts, firmware, software, and integrators needed to build and deploy a manufacturing or control system. In cyber security, it matters because every external dependency can become a trust boundary. A weak vendor, tampered component, or malicious update can introduce backdoors, disable equipment, or expose operational data before a system ever reaches the factory floor.
Attackers target this chain by compromising third-party software, inserting altered hardware, abusing update channels, or stealing credentials from suppliers and contractors. Defenders reduce the risk with supplier vetting, signed firmware and code, bill of materials tracking, secure provisioning, network segmentation, and integrity checks during installation and maintenance. For industrial environments, protecting the supply chain is as important as protecting the plant itself, because a compromised component can bypass many traditional perimeter controls.