Artwork

内容由Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff提供。所有播客内容(包括剧集、图形和播客描述)均由 Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal
Player FM -播客应用
使用Player FM应用程序离线!

Cyber Supply Chain Risk Management: No Silver Bullet

38:40
 
分享
 

Manage episode 378773948 series 1264075
内容由Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff提供。所有播客内容(包括剧集、图形和播客描述)均由 Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal

Compliance standards, privileged access management, software bills of materials (SBOMs), maturity models, cloud services, vulnerability management, etc. The list of potential solutions to supply chain risk management (SCRM) challenges seems unending as much as it is daunting to address. In this webcast, Brett Tucker explores some of these solutions. More importantly, he renews an emphasis on using robust enterprise risk management to achieve operational resilience in the cyber supply chain.

What attendees will learn

  • A means of decomposing strategic objectives and critical services into high-value assets that point to prioritization of limited risk response resources
  • Enterprise risk governance, appetite, and policy as they relate to and integrate cyber risks into a global risk portfolio
  • The application and impacts of Cybersecurity Maturity Model Certification (CMMC) and other regulatory directives on third-party risk
  • A kick-off announcement about the SEI CERT Supply Chain Risk Management Symposium to be held in February 2024
  continue reading

153集单集

Artwork
icon分享
 
Manage episode 378773948 series 1264075
内容由Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff提供。所有播客内容(包括剧集、图形和播客描述)均由 Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品,您可以按照此处概述的流程进行操作https://zh.player.fm/legal

Compliance standards, privileged access management, software bills of materials (SBOMs), maturity models, cloud services, vulnerability management, etc. The list of potential solutions to supply chain risk management (SCRM) challenges seems unending as much as it is daunting to address. In this webcast, Brett Tucker explores some of these solutions. More importantly, he renews an emphasis on using robust enterprise risk management to achieve operational resilience in the cyber supply chain.

What attendees will learn

  • A means of decomposing strategic objectives and critical services into high-value assets that point to prioritization of limited risk response resources
  • Enterprise risk governance, appetite, and policy as they relate to and integrate cyber risks into a global risk portfolio
  • The application and impacts of Cybersecurity Maturity Model Certification (CMMC) and other regulatory directives on third-party risk
  • A kick-off announcement about the SEI CERT Supply Chain Risk Management Symposium to be held in February 2024
  continue reading

153集单集

所有剧集

×
 
Loading …

欢迎使用Player FM

Player FM正在网上搜索高质量的播客,以便您现在享受。它是最好的播客应用程序,适用于安卓、iPhone和网络。注册以跨设备同步订阅。

 

快速参考指南