The U.S Cybersecurity and Infrastructure Security Agency (CISA) has released a Hardware Bill of Materials Framework (HBOM), for Supply Chain Risk Management (SCRM). The framework provides a baseline document for organizations to identify and name assets across their supply chains.…
For defense contractors outside of the U.S this is an important read. The DoD’s supply chain risk management framework, created to strengthen the resilience of the U.S defense supply chain. The report provides a useful update on the DoDs efforts…
Okta has confirmed the attack on its customers late yesterday, including a timeline of the incident from January 2022, when a Sitel employee was compromised, to March 2022. There is no clarity on the exact number of affected customer and…
3 of Toyota’s suppliers have publicised cyber-attacks in as many weeks. Demonstrating the impact of cybersecurity on its supply chain. Kojima Industries Corp, Denso and Bridgestone have had to deal with cyber attacks. At a time when Japan joined Western allies in…
A great thorough summary of what US public firms can expect if the Securities and Exchange Commission (SEC) cybersecurity proposal makes it into regulation without significant modification. For Foreign Private Issuers note the Summary point 5, as the proposal applies…
Supply chains are an ideal opportunity for disruption during these challenging economic and social times. Cyber Supply Chain Risk Management (C-SCRM) is a challenge for many manufactures, its expensive to implement and there is a lack of resources across industry…
The European Data Protection Board (EDPB) adopted additional General Data Protection Regulation (GDPR) data breach notification guidelines at the end of 2021. At a time when the US Federal government is also progressing legislation through Congress to address cybersecurity governance,…
Cyber insurance prices are up, coverage down and loss ratios rising. Cyber is a difficult risk to manage and innovation, economic growth, cyberspace and technology are not on the side of the underwriter and the insured. In our paper we…
The cyber incident that affected Toyota in Japan last week has highlighted the challenges for Japan’s manufacturers and their supply chains. The first is the fragility of JIT supply chains to impacts in product processing and delivery, the second is…
An informative article on cyber insurance. The announcement in January 2022 that Merck was entitled to a summary judgement following the Not Petya cyber attack of 2017. Set a precedent for cyber insurance claims and the use of the act…
