ANALYSIS OF CYBERSECURITY THREATS TO THE SUPPLY CHAIN AND POSSIBLE SECURITY CONTROLS: A BIBLIOMETRIC STUDY AND SYSTEMATIC LITERATURE REVIEW

Abstract

With the increasing complexity and interconnectivity of digital ecosystems, cyber risks have also expanded, particularly in the context of supply chains. In this scenario, vulnerabilities in any link of the chain can be exploited by malicious actors to compromise critical infrastructures, distribute malicious updates, and gain unauthorized access to confidential data. This study aims to analyze the cybersecurity threats affecting the supply chain, characterizing them based on the Supply Chain Threat Report proposed by the European Union Agency for Cybersecurity (ENISA) and identifying their purposes. Furthermore, the research also seeks to understand which technological and strategic solutions are effective in mitigating these risks, characterized based on the C-SCRM control families proposed by the National Institute of Standards and Technology (NIST). The methodology adopted is based on a qualitative literature review, analyzing academic articles and specialized publications, covering the period from 2020 to 2025. The results indicate a wide range of threats that compromise the cybersecurity of supply chains, highlighting deficiencies in practices and controls. This reinforces the need to adopt strategies such as Blockchain, Smart Contracts, cybersecurity frameworks, machine learning (ML), and antimalware solutions integrated with cyber risk management platforms. The study presents that the cyber resilience of the supply chain depends on the ability of organizations to identify, mitigate, and respond to threats present across all links of the chain.