Cybersecurity Risk Management

CHAPTER 5Supply Chain Risk Management

Overview of Chapter and Objective

This chapter will provide the reader with an introduction to the complex and evolving supply chain risk management field. The reader will also learn about the five essential aspects of supply chain risk management in the most recently updated version of the NIST Framework: (1) how to identify where you should manage supply chain risks, (2) pinpointing which suppliers are crucial to supply chain risk management, (3) developing vendor contracts that minimize supply chain risks, (4) continually assessing supply chain risk management procedures, and (5) testing to make sure vendors are resilient in the event of supply disruptions.

Doug’s team at Deluxe Security and Surveillance Systems Inc. is developing and installing a new type of motion detection alarm system when the avatar of a junior security engineer, Paige, pops up in a group chat on the company’s secure comms channel. “That’s odd,” Doug thinks. He just saw Paige leave the building’s tightly controlled facility, saying something about a dental appointment. He steps out of his office and sticks his head into Paige’s office near the server room. She’s not there.

“She must be somewhere else in the building,” Doug says to himself – this particular comms channel is accessible only from Deluxe’s secure location. He continues working. Paige’s avatar stays in the group chat. After a few hours, he sees Paige walk by his office door. He glances up from his ...