Supply Chains Are on a Collision Course with Cybercrime — And That’s a Huge Opportunity for Consultants

Only 5% of organizations have robust OT endpoint security at scale. With APQC, you have the data to make a difference.  

💼 In today’s volatile digital landscape, cybercrime is no longer a distant threat—it’s a daily reality. And for supply chains, the risks are multiplying fast. But here’s the good news: this is a prime opportunity for consultants to step in and lead. 

APQC’s latest research, outlined in one of our most popular recent research reports, “Supply Chains are on a Collision Course with Cybercrime,” reveals a widening gap between the scale of cyber threats and the readiness of supply chain organizations to respond.  

• Threats have increased over 1,475%
• Nearly 25% of organizations do not have a response plan
• Only 2% of organizations have a mature response plan 

In our survey, only a third of supply chain professionals expected cybersecurity to be a major focus area this year—even as threats escalate.  With our new cybersecurity benchmarks now available, consultants are uniquely positioned to help clients close that gap—and unlock real competitive advantage in the process. 

🔍 The Problem: OT Is the New Frontline 

While many organizations have hardened their IT systems, operational technology (OT)—the backbone of supply chains—is dangerously exposed. From IoT devices and robots to industrial control systems, these tools are increasingly vulnerable to attack. And yet, most organizations are underestimating the threat. 

Strategic cargo theft, for example, has surged by 1,475% in just two years, now accounting for a third of all cargo theft. These attacks don’t require breaking into a warehouse—they’re executed remotely, exploiting weak OT security. 

📉 The Blind Spot: Cybersecurity Is Losing Priority 

Shockingly, only 34% of supply chain professionals expect cybersecurity to significantly impact their operations in 2025—down from 43% in 2024. 

This decline in urgency comes at the worst possible time. 

As a consultant, this is your moment to reframe the conversation. With APQC’s benchmarks, you can show clients how their cybersecurity posture compares to peers and industry leaders—and where they’re falling short. 

💸 The Investment Gap: Spending Isn’t Keeping Up 

Most organizations spend just 0.5% of revenue on cybersecurity. For a $2B company, that’s $10M—compared to nearly $1B spent on manufacturing. 

Is that enough to protect the entire supply chain? 

With our proprietary data, you can help clients justify smarter investments, prioritize OT security, and build a business case that resonates with leadership. 

🛠️ The Readiness Crisis: Few Have a Plan 

Only 5% of organizations have robust OT endpoint security at scale. Just 2% have a mature incident response plan. 

That’s not just a gap—it’s a liability. 

Forward thinking consultants are using APQC’s benchmarks to guide clients through readiness assessments, scenario planning, and roadmap development. Whether it’s building a response plan or optimizing endpoint security, you’ll have the data to back every recommendation.