Amid global supply shortages, the oil and gas industry, like many others, has increased its collaboration with third-party suppliers. This hyperconnectivity has increased the digital footprint of third parties and transformed business models quickly. However, as well as improving efficiency, such third-party expansion introduces significant cyber and operational risks. These risks may generate important consequences for an organization’s operations, reputation and, ultimately, its bottom line. This report is intended as a practical guide for cybersecurity leaders managing third-party cyber risks within oil and gas supply chains. It includes actionable guidance, methodologies and examples to improve the oversight of third-party risks and improve cyber resilience across the oil and gas business environment.