Supply Chain Attack 2.3

Question 1

Supply Chain Vector

Answer 1

• ## Using a company’s supply chain as an unwitting agent in the attack.

Question 2

Supply Chain

Answer 2

• Set of firms that operate together to manage the movement of goods and services between firms.

Question 3

Service Provider Vector

Answer 3

• Have access to internal services, which can be an opportunity for the attacker.

Question 4

Considerations for Hardware Providers

Answer 4

• Use a smaller supplier base
• Have strict controls over policies and procedures
• Security should be part of the overall design

Question 5

Considerations of Software Providers

Answer 5

• Question every software installation.
• Digital signature should be confirmed during the installation.
• Some software will update or patch itself automatically.