CYBERSECURITY: A Growing Risk for Supply Chain Risk Management

No ratings

Presented at ISC2SecureSummit 2019 by

J.c. Dodson

Supply chain cybersecurity is a subset of broader supply chain risk management but is focused on IT systems, including hardware, software, and networks. Supply chains are the backbone of the global economy and cyber-related disruptions can impact all of the n-tier organizations in the overall supply chain. For example, the Maersk shipping company is responsible for 20% of the worlds shipping capacity and when they were infected with the NotPetya malware in 2017, their 800 ship fleet, which is supported by 80,000 employees in in 574 offices across 130 countries, were quite literally, “Dead in the Water.” That’s bad enough but all of the customers who depended on Maersk for fresh and frozen food products, raw materials for manufacturing, and finished goods destined for the retail market were also impacted. This event cost Maersk over $300M. When 80% of all security breaches originate in the supply chain and 72% of companies DO NOT have full visibility into their supply chains, it’s time to get serious about understanding the cyber-related risks. This talk will look at some examples of cyber-related supply chain events, identify various cyber-threats, highlight some of the things your company should be doing to mitigate those threats, and discuss some of the technology trends to be watching.