§ The Long Read

The deep work behind
the wire.

Research-led explainers, breach postmortems, regulatory briefs, and playbooks. Long-form work from the Supplier Shield desk and Abilene Advisors partners.

§ Archive

Every long read.

All66Uncategorized66
Deutsche Bank incident began at a third-party marketing platform, not the bank's networkLong read

Deutsche Bank incident began at a third-party marketing platform, not the bank's network

A cyber incident tied to Deutsche Bank started at a third-party marketing and incentive platform in Germany, not the bank's own network. The Unsafe ransomware group posted alleged employee records; Deutsche Bank says its systems were not affected and the scope is unconfirmed. For financial firms, the lesson is a DORA register one: an edge supplier that holds employee or partner data still belongs in scope.

Supplier Shield teamJul 14, 2026
Vendor due diligence: the checklist for regulated teamsLong read

Vendor due diligence: the checklist for regulated teams

A practical vendor due diligence checklist, tiered by risk and mapped to what DORA, NIS2, and GDPR now expect, including the fourth-party checks most teams skip.

Supplier Shield teamJul 7, 2026
Cyber supply chain risk management: From visibility gaps to resilience at scaleLong read

Cyber supply chain risk management: From visibility gaps to resilience at scale

Build a resilient cyber supply chain risk management program. Learn the latest market trends, key challenges, future predictions, and real-world case studies. Get a 90-day plan to reduce vendor risk and meet regulations like NIS2 and DORA.

Supplier ShieldApr 29, 2026
DORA and third-party risk management (TPRM): the complete guideLong read

DORA and third-party risk management (TPRM): the complete guide

DORA has applied since January 2025. Learn what it requires for ICT third-party risk management, the Register of Information and vendor oversight in EU financial firms.

Supplier ShieldApr 29, 2026
Financial services vendor risk management under new regulatory pressureLong read

Financial services vendor risk management under new regulatory pressure

Financial services vendor risk under new regulatory pressure: explore banking third‑party risk, DORA compliance for vendors, and vendor risk strategies.

Supplier ShieldApr 29, 2026
Third-party risk management software: What you need to knowLong read

Third-party risk management software: What you need to know

Compare top third-party risk management software for EU & Swiss companies. Discover tools aligned with NIS2, GDPR & DORA—without enterprise complexity.

Supplier ShieldApr 29, 2026
What is the best TPRM software for European companies in 2027?Long read

What is the best TPRM software for European companies in 2027?

Compare 10 top TPRM software solutions for NIS2 and DORA compliance. Honest reviews, pricing, EU features, and implementation times.

Supplier ShieldApr 29, 2026
What Is TPRM? Third-Party Risk Management ExplainedLong read

What Is TPRM? Third-Party Risk Management Explained

TPRM manages risks from vendors, suppliers, and partners. Learn why 30% of breaches involve third parties and how to implement TPRM for NIS2 and DORA compliance.

Supplier ShieldApr 29, 2026
The Daily Brief

Get every new long read in your inbox.

One email a day. Five disclosures from the Breach Wire plus every new long read from the desk.