The Missing Supply Chain Link: A Safe Harbor for Risk Information Sharing
summary
Edna Conway and Ari Schwartz describe gaps in supply chain risk management and propose building a safe-harbor framework for sharing actionable supply chain risk information. They focus on how public-private collaboration can enable organizations to share and use threat and vulnerability data to mitigate supply chain security threats before they reach affected parties, and explain how to participate in that effort.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:20Supply Chain Risk: A Lifecycle Challenge
- 13:47Why Are Companies Reluctant to Share?
- 20:10DHS ICT Supply Chain Risk Management Task Force
- 29:56The Elephant in the Room: Naming Risk Actors
related talks
26mCyber Resilience: Understanding Supply Chain Risks
29mSupply Chain Security in the Software Era
40mA Punch to the Supply Chain: Fighting Back to Resilience
18mExploring a Risk Approach to Software Supply Chain Security
30mManaging Software Supply Chain Risks in a Large Organization
15mSupply chain security for dummies
43mCreating the Standard for Supply Chain Risk - MITRE's System of Trust™
41mSupply Chain Armoring: Tools and Techniques for Open Source Projects