Stop Drowning in Lake Assurance: Supply Chain Security and a New Frontier
summary
Platform InfoSecAssure exists to stop the questionnaire tidal wave after its team answers 30,000 unique security questions and samples ~7,000 more to find patterns. Real incidents cited: HVAC breach that exposes 40 million credit cards, 30,000 laptops shipped with Super Phisher, and a gas-company VPN ransomware case that caused fuel panic. Advice: run a Know Your Supplier register, tier suppliers, put company-level controls in a master services agreement and only ask focused service controls (not 1,200-question questionnaires).
AI-written summary · about
chapters (5)
- 0:00Start
- 2:39Risky Business
- 8:04Supplier profiles drive requirements
- 11:45Buyer vs Supplier power
- 30:13Apply What You Have Learned Today
related talks
51mThe Enemy Within: Modern Supply Chain Attacks
15mSupply chain security for dummies
39mSoftware Supply Chain Security
52mLessons Learned from the Summer of Supply Chain Attacks
50mSoftware Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies
15mSoftware Supply Chain Security for those in a rush
54mSecuring the Digital Supply Chain: What we should do for Supply Chain Security in DevSecOps?
48mRemaining Resilient in the Supply Chainpocalypse