ICT products are the result of a global supply chain. A single piece of equipment typically includes components sourced from all over the world. To deal with threats effectively, we need global standards and internationally agreed processes and best practices. Our approach is that cyber security needs to be built into every single aspect of a company, from strategy and processes to human resources and delivery, rather than bolted on afterwards. It has to become part of a company’s DNA.