cognitive cybersecurity intelligence

News and Analysis

Search

Keep Software Supply Chains Secure With New Federal Guidance

NIST SP 800-161 Revision 1 recommends three levels of supply chain security strategies. Essential practices include creating a Program Management Office for supply chain risk management (C-SCRM), developing incident management measures and requiring suppliers to identify vulnerabilities. Sustaining practices involve incorporating C-SCRM requirements into supplier contracts. Enhancing practices include using automation and metrics for better C-SCRM management. Guidelines from CISA, NSA and ODNI also suggest software suppliers provide a software bill of material and verify it against known vulnerability databases.

Source: fedtechmagazine.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts

The New Breed Of Layer 7 Attacks And How SMEs

The New Breed Of Layer 7 Attacks And How SMEs

Layer 7 DDoS attacks stealthily mimic legitimate user behavior, exhausting system resources without overwhelming traffic. Unlike traditional attacks, they evade detection and exploit vulnerabilities in