security controls embedded in the supplier onboarding process, processes for assessing supply chain cyber breaches and ransomware incidents, a playbook for restoring business continuity, and continuous assessment and control enhancement of high-impact suppliers.