|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/supply-chain-infosec-isoiec27036/
课程评论：没有评论
**课程名称：** 供应链风险管理 (SCRM) ISO/IEC27036 / ISO28000 **课程概述：** 当前，供应链面临日益严峻的网络威胁、黑客攻击、间谍活动和网络战，这些攻击对关键基础设施和各类规模的企业造成的成功案例不断增加。虽然现有技术在阻止部分攻击方面取得了一定成效，但当供应链安全或风险管理面临挑战时，我们日常所需（衣食住行）将受到严重影响。风险管理虽然不如代码安全或安全运营中心（SOC）那样引人注目，但其重要性不亚于它们，尤其是在隐蔽性方面。 在众多威胁因素中，许多人容易忽视供应链本身以及数据、信息和知识产权（IP）在从外包公司（收购方）流向供应商过程中的安全性。Gemalto（全球最大的SIM卡制造商之一）的遭遇便是此类攻击的一个典型案例。 **课程核心内容：** * **供应链风险管理的本质：** 供应链风险管理主要关注识别供应链信息安全风险，以及由于治理缺失、流程不当和买卖双方理解偏差导致这些风险被利用的可能性。 * **风险类型分析：** 探讨若供应链风险和供应商管理不当，可能为企业乃至国家带来的风险类型。 * **风险识别与资产保护：** 帮助学员根据供应商类型识别自身面临的风险，并确定需要优先保护的资产。 * **风险缓解与最小化：** 指导学员选择能够缓解和最小化部分风险的机制、流程和程序。
In today's Supply Chain, cyber threats, hackers, espionage, and warfare are increasing the amount of successful attacks on critical infrastructure and companies of all sizes. We have technologies that are somewhat successful at blocking and stopping "some" attacks. But what happens when we need supply chain security or risk management? The things we wear, eat, and need would no longer exist. Risk Management is not the sexier of areas in security, but since it is so invisible, it is just as important as secure coding or SOC. Amidst these threat vectors, many people forget some of the most prominent targets, like the supply chain and the security of data, information, and IP, as it leaves the outsourcing company (acquirer) to the supplier. An example of this type of attack is what happened to one of the biggest SIM manufacturers in the world, Gemalto.Supply chain risk management in its simplest form:Concentrates on identifying supply chain information security risks and the likelihood of those risks being exploited by missing governance, processes, and misunderstandings between acquirer and supplierWhat types of risks are likely to a company or possibly a nation if supply chain risks and suppliers are not managed correctlyHelp you identify which risks you have based on the type of supplier and, more importantly, which assets you need to protect Choose mechanisms, processes, and procedures that can mitigate and minimize some risks
