Section 10.91 Supply Chain Attacks

Question 1

Supply Chain Attacks

Answer 1

An attack that targets a weaker link in the supply chain to gain access to a primary target

Exploit vulnerabilities in suppliers or service providers to access more secure systems

Question 2

CHIPS Act of 2022

Answer 2

U.S. federal statute providing funding to boost semiconductor research and manufacturing in the U.S.

■ Aims to reduce reliance on foreign-made semiconductors, strengthen the domestic supply chain, and enhance security

■ Semiconductors: Essential components in a wide range of products, from smartphones and cars to medical devices and defense systems

This act was to strengthen the semiconductor supply chain to make it more resillent

Question 3

4 main things

Safeguarding Against Supply Chain Attacks

Answer 3

1. Vendor Due Diligence: Rigorous evaluation of vendor cybersecurity and supply chain practices
2. Regular Monitoring & Audits: Continuous monitoring and periodic audits of supply chains to detect suspicious activities
3. Education and Collaboration:
   ● Sharing threat information and best practices within the industry
   ● Collaborating with organisations and industry groups for joint defense
4. Incorporating Contractual Safeguards:
   ● Embedding cybersecurity clauses in contracts with suppliers or service providers
   ● Ensuring adherence to security standards with legal repercussions for non-compliance