Net Defence Black Logo

Take Control Speak to a specialist

Cyber Resilience

Protect your business from cyber risk.

View Services

IT Support

Manage your technology infrastructure.

View Services

Telephony

Keep your organisation connected.

View Services
Net Defence

Give your organisation the very best in protection, connectivity & support.
Speak to a specialist today

Take Control

Home / Resources / The 3-2-1 Supplier Risk Action Model

The 3-2-1 Supplier Risk Action Model

This is a simple, practical framework to help law firms focus effort after completing a supplier risk assessment. The Model supports cyber and operational risk management only. It does not provide legal or contractual advice.

The 3-2-1 Supplier Risk Action Model

What's included in the Model?

This document introduces our 3-2-1 Supplier Risk Action Model, a practical framework designed to help law firms manage cyber and operational vendor risks.

It provides a structured way to turn risk assessments into immediate action by identifying:

  • 3 highest-risk suppliers to focus on
  • 2 priority internal improvements within your control
  • 1 quick win to complete immediately

Speak to us today

Net-Defence is committed to protecting and respecting your privacy at all times, and we’ll only use the details you give us to provide information on the products and services you request from us. By submitting this form, you confirm that you have read, understand and agree to our Privacy Policy.

Latest in Resources

View all
Why online privacy needs to be the next ‘stranger danger’ conversation
Resource pdf

Why online privacy needs to be the next ‘stranger danger’ conversation

This article highlights why online privacy must be reframed as an essential life skill, bridging the gap between how children manage personal data and how parents discuss digital safety.

Details & download
Managed IT support: can you trust your provider?
Resource pdf

Managed IT support: can you trust your provider?

This guide will take a critical look at the risks involved when choosing an MSP, explore high-profile attacks that highlight the stakes, and examine how adherence to industry standards can restore confidence. It might not be comfortable, but this is a conversation every business should have.

Details & download
Six steps to prepare for the landline/PSTN switch-off
Resource pdf

Six steps to prepare for the landline/PSTN switch-off

From January 2027, landlines and the PSTN will be permanently switched off. Rather than waiting for the deadline, we recommend using our checklist now to prepare early and adapt smoothly to the changing landscape.

Details & download
From assessment to action: turning supplier risk into practical resilience for law firms
Resource pdf

From assessment to action: turning supplier risk into practical resilience for law firms

This paper focuses on how law firms can move from supplier risk assessment to practical, proportionate action, without overengineering processes or straying into legal or contractual territory.

Details & download
What is Business Email Compromise (BEC)?
Resource pdf

What is Business Email Compromise (BEC)?

The digital world offers unprecedented connectivity but also opens the door to increasingly sophisticated cyber threats. Among the most dangerous of these is Business Email Compromise (BEC). Join us as we explain how it works, why it happens, and how we can provide support.

Details & download
IT and cyber = the chicken or the egg?
Resource pdf

IT and cyber = the chicken or the egg?

While cyber and IT may seem distinct, they are interdependent functions and essential for protecting modern businesses. Read our review of the different segments of IT and cyber to get a better understanding of their relationship.

Details & download
The evolution of ransomware
Resource pdf

The evolution of ransomware

Let’s take a journey from floppy disks in 1989, all the way to the legislative moves being made right now, as we cover the evolution of ransomware.

Details & download
Supply chains and cyber threats: how your legal practice can manage risk
Resource pdf

Supply chains and cyber threats: how your legal practice can manage risk

The supply chain within the UK legal sector may not mirror the traditional models seen in manufacturing or retail, but it still depends on a complex network of upstream and downstream relationships. Let's explore cyber risk within the supply chain and how to mitigate them.

Details & download
GDPR data breach prevention: practical actions guide
Resource pdf

GDPR data breach prevention: practical actions guide

This practical guide details critical technical controls, data governance practices, and staff training strategies designed to minimise human error, manage supplier risk, and ensure rapid response to GDPR data breaches.

Details & download
Unconscious bias… how cybercriminals are using this against you!
Resource pdf

Unconscious bias… how cybercriminals are using this against you!

Research suggests that unconscious bias occurs near-automatically, without a second thought. The brain makes a quick judgement based on your past experiences, background, prior beliefs and stereotypes. Join us as we explore how cybercriminals are using this phenomenon against you.

Details & download

Defence, protection, security. We've got you covered.

Whether you need to enhance your approach to cyber threats, overhaul your IT infrastructure or improve your communications, we’re here to help and advise. Talk to a specialist today and take the next step towards being a stronger, more resilient business.

Speak to us today

Need support? Take Control.

The button below is to be used when instructed by our technical support team. This will allow a file to be downloaded to your device for them to take control and help solve the issues you are having.

ND Take Control

exe · 7.70MB

Please note: only to be used when instructed by a member of our support team. Windows devices only.