Software Engineering Institute

Compliance standards, privileged access management, software bills of materials (SBOMs), maturity models, cloud services, vulnerability management, etc. The list of potential solutions to supply chain risk management (SCRM) challenges seems unending as much as it is daunting to address. In this webcast, Brett Tucker explores some of these solutions. More importantly, he renews an emphasis on using robust enterprise risk management to achieve operational resilience in the cyber supply chain.

What attendees will learn:

• A means of decomposing strategic objectives and critical services into high-value assets that point to prioritization of limited risk response resources
• Enterprise risk governance, appetite, and policy as they relate to and integrate cyber risks into a global risk portfolio
• The application and impacts of Cybersecurity Maturity Model Certification (CMMC) and other regulatory directives on third-party risk
• A kick-off announcement about the SEI CERT Supply Chain Risk Management Symposium to be held in February 2024