Supply Chain Risk Management Capabilities Center
Mar 1, 2023 Time: 10:00 AM – 12:30 PM ET
Location: Web Conference
The NIST Cybersecurity-Supply Chain Risk Management guidelines released in May 2022 establish 12 coverage areas (many of which are outside traditional information security boundaries) and put a spotlight on the importance of robust, accurate evaluations as part of any supply chain security strategy.
President Joe Biden’s motorcade pulled up to a 40-acre construction site dotted with some two dozen red, blue and gold cranes. An American flag hung from one of the site’s buildings alongside a banner that read “A Future made in America: Phoenix, Arizona.”
The site will feature a new facility of the Taiwan Semiconductor Manufacturing Company. Biden had arrived to tout the company’s newly announced $40 billion investment in U.S. microelectronics manufacturing following the July enactment of the CHIPS Act, which included $52 billion in subsidies and tax incentives for businesses that produce semiconductors within the country.
The industry capped off another dismal year with a 17% year over year drop for Q4. That number puts the full year’s shipping figures 11% below 2021, per new numbers from Canalys, which refer to it as “an extremely challenging year for all vendors.”
These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations:
About 1,000 vessels have been affected by a ransomware attack against a major software supplier for ships. Oslo-based DNV – one of the world’s largest maritime organizations – said it was hit with ransomware on the evening of January 7 and was forced to shut down the IT servers connected to their ShipManager system.
Production at U.S. factories fell more than expected in December and output in the prior month was weaker than previously thought, indicating that manufacturing was rapidly losing momentum as higher borrowing costs hurt demand for goods.
Manufacturing output dropped 1.3% last month, the Federal Reserve said on Wednesday. Data for November was revised lower to show production at factories decreasing 1.1% instead of the previously reported 0.6%. Economists polled by Reuters had forecast factory production would decline 0.3%.
The intricate labyrinth of open source dependencies across the global software supply chain has created an application security puzzle of mammoth proportions. Whether open source or closed, most of the world’s software today is built on third-party components and libraries. Consequently, one piece of vulnerable code in even the smallest of open source projects can have a domino effect that impacts thousands of other applications, APIs, cloud infrastructure components, and more.
Zimbabwe earlier this week stopped the export of raw lithium from its mines and said that it wants cash in on the value addition and also stop losing billions to foreign companies via mineral proceeds, news agencies reported.
On December 20, Zimbabwe’s ministry of Mines and Mining Development in a directive published under the nation’s Base Minerals Export Control Act said that the move was made to “ensure that the vision of the president to see the country becoming an upper-middle income economy has been realized.”
JANUARY 24 & 25, 2023
MITRE McLean Building 1
7525 Colshire Drive
Mclean, VA 22102
The Software and Supply Chain Assurance Forum (SSCA) provides a venue for government, industry, and academic participants from around the world to share their knowledge and expertise regarding software and supply chain risks, effective practices and mitigation strategies, tools and technologies, and any gaps related to the people, processes, or technologies involved. Co-led by the National Institute of Standards and Technology (NIST), the Department of Homeland Security (DHS), the Department of Defense (DoD), and the General Services Administration (GSA).
Part I of this article explores the concept of Supply Chain Integrity, which is regularly bundled with Supply Chain Security. As opposed to supply chain security, which is focused on protecting those products or materials transiting the supply chain, supply chain integrity focuses on the provenance, authenticity and traceability of those products or materials. Supply Chain Integrity starts with raw materials and ends with the end user.