Back to blogSecurity

Why geopolitics is suddenly on the information security agenda

uComply

Team uComply

Author

August 19, 2026

Published

For a long time, geopolitics and information security seemed like two separate worlds. So far this year, that idea has become firmly outdated: geopolitical developments have a direct impact on the digital resilience of organisations. International conflicts, economic sanctions and tensions between countries not only create uncertainty in world politics, but also have tangible consequences for business operations, and for the availability and confidentiality of technology.

From a technical issue to risk beyond your own walls

Where information security used to be seen primarily as a technical issue, today we see that cyber risks increasingly arise from events outside your own organisation. Suppliers can be hit by sanctions, cloud providers may depend on international infrastructures, and state actors play an ever-larger role in the threat landscape.

Traditional risk assessments fall short

For many organisations, this means that traditional risk assessments are no longer sufficient. In addition to vulnerabilities in systems and processes, dependencies within the supply chain, geopolitical risks and the reliability of suppliers must also be taken into account in decision-making.

This aligns closely with the requirements that legislation such as NIS2 and the Dutch Cybersecurity Act places on risk management and supply chain responsibility.

What does this mean for your organisation?

Digital resilience calls for a broader view than technology alone. Organisations are well advised to have insight into:

  • Critical suppliers and their dependencies
  • The geographical location of data and infrastructure
  • Risks around international cooperation
  • Continuity of essential business processes
  • Scenarios for disruptions within the supply chain
  • Organisations that take an integrated approach to their risks are better prepared for unexpected developments and can respond faster when circumstances change.

    Digital security is not separate from the world

    Digital security does not stand apart from the world around us. Organisations that factor geopolitical developments into their risk management build a higher level of resilience, continuity and trust.

    How uComply helps

    At uComply, we see that successful organisations increasingly opt for an integrated approach in which governance, risk and supplier management come together. Instead of separate risk analyses, scattered supplier lists and documents spread across SharePoint, Teams and Excel, uComply brings this information together in a single environment within your own Microsoft 365.

    This allows you to:

  • record and assess suppliers and their dependencies centrally;
  • structurally include geopolitical and supply chain risks in your risk management;
  • keep measures, improvement actions and evidence demonstrably up to date;
  • link continuity scenarios to concrete risks and owners.
  • Because digital resilience also means understanding the risks that lie beyond your own walls.

    Want to see how uComply brings governance, risk and supplier management together? Book a demo or explore our solutions.