Knowledge Graphs for Informed Decision-Making: A Tool for Digital Resilience in Supply Chains / Cyber Resilience in Digital Supply Chains: An Interdisciplinary Approach to Threat Propagation and Mitigation

Knowledge Graphs for Informed Decision-Making: A Tool for Digital Resilience in Supply Chains

Ghusen Chalan

Ph.D. Candidate at University of Twente

Digital supply chains are increasingly dependent on complex networks of IT systems, software services, and third-party vendors. This complexity makes it difficult for organizations to assess risks, identify vulnerabilities, and make informed decisions under pressure. We are working on a decision-support tool developed as part of the DReSC project, which uses knowledge graphs to map and analyze these digital dependencies specifically software dependencies.

Ghusen has a background in Management Information Systems, an MBA in Service Management, and he recently completed his master's in business information technology at UT. He has spent a good part of his career in the hospitality sector in the Gulf region; UAE, Oman, and Qatar, which gave him the chance to travel and experience diverse cultures. Ghusen is enthusiastic about exploring unfamiliar places, history, photography, and scuba diving is something he always tries to fit into his travels. For the past two years, He has been living in Netherlands for the last two years, and the Dutch cycling culture has started growing on him, especially when the sun’s out!

Cyber Resilience in Digital Supply Chains: An Interdisciplinary Approach to Threat Propagation and Mitigation

Aswin Sanil

Ph.D. Candidate at University of Twente

As supply chains go digital, they are not just moving faster, they are becoming easier targets for cybercriminals. Organisations rely more than ever on cloud platforms, IoT systems, and third-party software, making it easier for a single breach to cause chaos beyond the IT department. The SolarWinds attack showed how one compromised component could rattle global networks. Closer to home, a ransomware attack on Bakker Logistics left Albert Heijn shoppers facing a crisis few expected: no cheese on the shelves. These incidents highlight how cybersecurity now plays a central role in supply chain resilience, not just in technical systems, but in real-world operations.This research models cyber risk propagation in digital supply chains by applying graph theory, stochastic modelling, and behavioural economics. It simulates cyberattacks on supply chain networks to explore how vulnerabilities spread and where mitigation works best. The analysis examines both technical countermeasures (e.g., quarantining critical nodes) and non-technical strategies (e.g., behavioural nudges and regulatory incentives) to strengthen resilience. It also contributes to cybersecurity training programs tailored for supply chain stakeholders, helping them improve awareness, preparedness, and response behaviours. The ultimate goal is to build a resilience-oriented decision framework that enables organisations to anticipate and manage cyber disruptions more effectively.

Aswin Sanil is a Ph.D. candidate at the University of Twente. He obtained his master’s degree in Industrial Engineering and Management from Linköping University, Sweden, and his bachelor’s degree in Mechanical Engineering from the University of Kerala, India. His PhD project focuses on digital resilience in supply chains, particularly on modelling cyber risk propagation, evaluating cybersecurity investment strategies, and investigating the role of human decision-making in digital risk management. His research interests lie at the intersection of network science, game theory, and behavioural operations research, with a growing focus on educational interventions and cybersecurity training to enhance organizational preparedness.