Скачать или смотреть TLC Podcast 31

This week Maria and Curtis discuss how to prevent supply chain cyber attacks.
https://www.riskcrew.com/2023/02/supp...
• 2020 Solarwinds Orion attack
• A supplier’s widget design material is stolen in another country, resulting in a loss of your intellectual property and market share.
• A supplier’s critical systems are inaccessible due to ransomware attacks — disrupting your inventory and sales revenue.
• A supplier’s systems are breached and used to obtain unauthorised access to your business systems.
• A supplier’s systems are breached, and your customer’s sensitive information is made public.
• Define the term “Supplier”: Establish the definition of a supplier to ensure all third-party services and any IT connections are identified and addressed. For example, would you define a contractor as a supplier?
• Identify information requiring protection: Use your information classification scheme to determine which information requires which level of protection. If these tools are not available, you’ll need to define a scheme that identifies (at a minimum) confidential, personal, restricted or unrestricted information assets.
• Select risk benchmark and metrics: Choose a benchmark (i.e. ISO 27001) and metrics to measure the risk associated with each supplier.
• Triage Suppliers: Based on the volume and sensitivity of your data that the supplier is processing, storing, or transmitting; categorize suppliers into different risk categories i.e., Critical, High, Medium or Low.
• Review Service Level Agreements (SLAs): Ensure that the SLAs with suppliers include provisions for breach notification, emergency response, insurance, liability, brand impact statements and exit procedures.
• Remediate: Upon identifying potential risks within the supply chain, direct suppliers to implement remedial controls to meet your company’s risk appetite.
• Act as a mentor: Mentor suppliers on how to improve their security practices and provide ongoing support to maintain a secure supply chain and good supplier relationships.

First a couple of alerts for Android and iPhone users.

https://scrippsnews.com/stories/how-t...
https://www.lotusbusinesstech.com/202...

Remember to sign up for Maria’s weekly cybersecurity tips delivered to your inbox. https://weeklycybersecuritytips.com.

Check out the podcast episodes on you favorite podcast venue. Leave us comment on your thoughts.

https://podcasts.apple.com/us/podcast...
https://open.spotify.com/show/161fFmn...
https://www.iheart.com/podcast/269-tl...