Cybersecurity Services for Arrow Electronics

Arrow has been in business since 1935 and runs two quite different companies under one name: components distribution serving engineers who design hardware, and enterprise computing serving the IT channel. Ninety years is long enough to have survived several complete turnovers of what technology distribution means.

The components side is where the interesting exposure sits. Arrow's customers there build devices, and those devices increasingly ship with network stacks, firmware update paths and support lifetimes measured in decades. Regulation has caught up: the EU Cyber Resilience Act puts obligations on manufacturers for the security of what they place on the market, and that flows back through the supply chain to the people who supplied the parts and the reference designs.

That is a security conversation Arrow's components customers have not had to hold before, and it does not look like enterprise IT security. It is secure development lifecycle, firmware signing, vulnerability disclosure handling and software bills of materials. CWS covers product security work alongside the enterprise engagements on the other side of the house, under Arrow's brand, so a manufacturer asking how to meet an obligation gets an answer from the distributor rather than a search result.