An ICT supplier is a company that provides information and communications technology products or services, such as software, cloud hosting, network support, help desks, or managed security. In practice, these suppliers often become part of an organization’s operational dependency, because their systems, people, or access help keep business services running.
In cyber security, ICT suppliers matter because they can expand the attack surface. If a supplier has privileged access, manages key assets, or supports critical services, a compromise at the supplier can lead to data theft, service disruption, or a wider intrusion into the customer environment. Defenders therefore assess suppliers by the assets they touch, the access they hold, and the impact if they fail. Good controls include access reviews, contract requirements, resilience testing, and plans to revoke or replace supplier access quickly during an incident.