Nowadays, cyber attacks and security breaches are very sophisticated and take different forms. Among others, supply chain attacks are becoming increasingly popular since attackers can access systems of multiple organisations through trusted third-party vendors. Even organisations with the most robust data security systems may still be susceptible to cyber attacks or security breaches due to the vulnerabilities of commercial or open source software/system components with malicious codes being injected by attackers.