Enabling Enterprise Resilience through Security Automation ...

More documents

Recommendations

Info

Supply Chain Exploit Frame of Reference■ Complex, emerging supply chain risks■ Diverse, emerging policies, standards, best practicesWe need a common language to describesupply chain exploitation, so that:1. Greater customization of security controls(to reduce implementation costs)2. Better collaboration across partners (toimprove effectiveness of security activities)11
(1) A Common Language for SC ExploitsExploit TechniquesMalevolent BehaviorExamination/ DisclosureAlteration/ MalwareCoercion/ InfluenceTheft/DestructionCounterfeitingMalicious LogicExfiltrate/ Expose DataDestroy/Corrupt DataElevate PrivilegesDeny AccessDestroy/Corrupt EquipmentProduction/IntegrationEnvironmentalWeaknessesExploits and weaknesses vary across systems, domains ofcustody, and phase of the system lifecycle.TechnicalWeaknessesPoor or Inadequate:RequirementsTestingDesignDevelopmentPracticesBusiness WeaknessesCross-PurposeIncentivesDiversionsInadequate Training/EduIneffective Policy…Ineffective ProcessesMarket/CountryWeaknessesSmall MarginsWeak IntellectualProperty RulesWeak Privacy RulesLack BusinessIndependenceVulnerable Systems| 12 |
Page 1 and 2: Software & Supply Chain Assurance:E
Page 3 and 4: ICT Supply Chain ExploitationToward
Page 6 and 7: Who is susceptible to supply chain
Page 10 and 11: Domain of Custody(1) Common Languag
Page 12 and 13: (2) Countermeasure Prioritization E
Page 14 and 15: | 17 |Examples of TransferableTechn
Page 16 and 17: SCRM Systems Engineering Needs1. A
Page 18 and 19: (4) Security “Pipework”| 22 |
Page 20 and 21: Identifying DHS Concerns about howS
Page 22 and 23: Cybersecurity and CommunicationsRes
Page 24 and 25: Why it Matters■ Industrial Espion
Page 26: Software Assurance Addresses Exploi

Enabling Enterprise Resilience through Security Automation ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?