Call us now:
This is an outstanding well sourced report, and should be read by any firm focused on cybersecurity and supply chain risk management.
Back in 2019 the U.S Airforce commissioned the RAND Corporation for their assistance in understanding the significance of cyber risks to the defense industry base supply chain, compared to other supply chain risks.
The output of the report conclude that
1. Cyber-related risks could be substantially worse than and different from others.
2. Preventative measures are not enough.
3. Cyber SCRM requires more than an amalgam of cyber and SCRM.
4. Private-sector efforts to manage risk may not meet national security needs.
5.Research can do more to support cyber SCRM.
This report underpins several GAO reports that have made clear that the DIB is suspectable to cyber attacks, that are substantially worst than other non-digital threats; Left of bang and Right of bang measures are needed to manage cybersecurity risks; cyber is a significant threat to the needs of national security; the private sector alone cannot manage cyber risk.
The report raises questions about the current DoD approach for cyber supply chain security. The competing agenda of national security objectives, a lack of understanding of under lying risks and the economics of cyber security compliance between the public and private sector.
Well worth a read.
Veritas GRC
Ted Dziekanowski Brian D. McCarthy Rich Waite, M.Ed. George Sawyer
#cybersecurity #cyberriskmanagement #supplychainrisk #supplychainsecurity
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7149007527316267008