Supply Chain Monthly

When it comes to integrating the latest technological breakthroughs into supply chain management, we may consider the cost savings, systems efficiency, and profitability, rather than the risks and the need for rigorous vetting. Once in a breach crisis however, typical kneejerk reactions are often met with typical kneejerk solutions, which often become permanent until the next vulnerability is identified. Does this lack of proactivity bring the game "whack-a-mole" to mind?

The National Institute of Standards and Technology (NIST) writes in its Best Practices in Cyber Supply Chain Risk Management guidance that "cybersecurity in the supply chain cannot be viewed as an IT problem only," and must be addressed across the enterprise. Key risks noted by NIST include third-party vendors, poor security practices by lower-tier suppliers, and compromised or counterfeit software/hardware purchased from suppliers. Every phase of technology integration is crucial and must be closely examined through a security lens. Here are ways to monitor three critical phases of supply chain technology integration – research (conception), development (manufacturing) and fielding (deployment).

Visit https://www.naylornetwork.com/cscm-nwl/articles/index.asp?aid=472402&issueID=57968 to view the full article online.