Supply chain attacks surge with orgs 'flying blind' about dependencies

The vast majority of global businesses are handling at least one material supply chain attack per year, but very few are doing enough to counter the growing threat. New research from SecurityScorecard shows organizations and their security leaders are gravely concerned about supply chain risks. 88 percent of the 550 CISOs and …

[Doctor Syntax]

"Cyber resilience generally refers to reaching a point where an organization can confidently and effectively detect, neutralize, and recover quickly from any kind of cyber attack. "

It's one thing an organisation being able to do that is it's attacked but what about an attack on an nth party in the supply chain? If that party's taken out in an attack can the organisation function without it? If it can why is that in the supply chain?

[Anonymous Coward]

Like most organisations - outsourcing, offshoring, contracting out, TUPEing/screwing your staff, Just In Time Delivery and general bean-counter behaviour have fucked your organisations, decimated self-reliance and compromised resiliency….. and you haven’t even done a proper Risk or. Business Continuity Assessment.

Shame on you.

[I am the liquor]

Not to worry, just send out a 5-page questionnaire to all your suppliers, that should fix it.

[Anonymous Coward]

Requirements.txt

Attacked ? Easy to find. The weak link is somewhere in there. Oops, thats just the first level requirement. We fixed it. We changed all code to node.js.