Creating the Standard for Supply Chain Risk - MITRE's System of Trust™
summary
MITRE presents System of Trust as a knowledge model plus a prototype cloud native tool to standardize which supply chain risks to manage not how to manage them. It organizes risks into 14 top-level risk areas, lets organizations create a tailored profile to pick a subset, and maps questions to standards such as IEC 62443 and ISO 20243. The prototype Risk Model Manager is AWS based, planned open source, and supports exports, APIs to structured sources, automation for roughly a third of checks, spider‑graph outputs, and has engaged 21 organizations and 200+ user accounts.
AI-written summary · about
chapters (5)
- 0:00Start
- 3:37Open Question: What Supply Chain Risks to Manage?
- 6:09Basis of Trust
- 13:02Full SoT-Risk Model Manager
- 26:31SoT Risk Model Manager Automation Technical Approach
related talks
42mAddressing Supply Chain Security Risks: MITRE's System of Trust™
51mThe Overlooked Security Risk: 3rd Party Risk Management
40mBuilding Trust in Supply Chains
47mAutomating Architectural Risk Analysis with the Open Threat Model format
41mSupply Chain Armoring: Tools and Techniques for Open Source Projects
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
29m3rd-Party Cyber-Risk Mitigation by Using ISO Standards
40mManaging Risk Across the Vulnerability Ecosystem