This report is a companion guide to a larger research report, ‘Managing Digital Infrastructure Risk: A collaborative path to financial services safety’ produced by JWG. It is intended to help IT managers understand the implication of new regulatory demands on the IT supply chain.