# Strengthening supply chain cyber security at the MHRA

Source: https://www.keypedia.com/records/uk_mhra_guidance/uk-mhra/f93d0650-267b-40b0-bf34-b5b40559a4f8
Type: Guidance
Published: February 26, 2026

> The Medicines and Healthcare products Regulatory Agency (MHRA) has issued guidance regarding a new supply chain assurance initiative designed to bolster security across its vendor network. This directive applies to all current and former suppliers who may be requested to participate in a centralized risk management process. While the provided text does not specify exact inspection dates or individual violations, it establishes a formal regulatory framework focused on supply chain oversight and data security. The primary objective is to streamline risk assessment through the use of the Risk Ledger platform, a collaborative security tool. Under this new protocol, invited suppliers are required to join the platform and complete a comprehensive security profile that details their organizational safeguards and risk mitigation strategies. This action is mandatory for those selected, as it allows the MHRA to maintain a high level of transparency and assurance regarding the security practices of its third-party partners. By centralizing these assessments, the MHRA aims to mitigate potential threats and ensure that all contributors to the agency's operations adhere to rigorous security standards. Suppliers must prepare to provide detailed documentation of their internal controls to facilitate this agency-wide security audit and maintain their standing within the UK healthcare supply chain ecosystem.

---

## Content

The MHRA is in the process of ensuring it has the right level of assurance across its supply chain, meaning any MHRA suppliers past and present, may be invited to join the Risk Ledger platform and complete a security profile.

## Attachments

- [Strengthening supply chain cyber security at the MHRA](/government/publications/strengthening-supply-chain-cyber-security-at-the-mhra/strengthening-supply-chain-cyber-security-at-the-mhra)
- [MHRA Risk Ledger email template example](https://assets.publishing.service.gov.uk/media/69a023d2532c9ad91ebbcd3e/Risk_Ledger_MHRA_email_template_sample.pdf)