Remaining Resilient in the Supply Chainpocalypse
summary
Companies with 15–20,000 software contracts and 2,500–2,700 IT vendors face specific controls: central vendor risk assessments, continuous scanning and CVE monitoring, and incident-run remediation rather than waiting on VM cycles. Expect cited metrics — 76% complete account takeover risk, 29% of 2023 breaches tied to third parties, MOVEit’s ~$10B and 1,000 known victims — and concrete defenses: SSO+MFA, remote browser isolation, proxy outbound traffic, rapid secret rotation, microsegmentation/zero-trust, and Cloudflare DDoS/CDN placement for 1,000+ apps to reduce lateral movement and speed recovery.
AI-written summary · about
chapters (21)
- 0:00Supply chain resilience intro
- 1:50Software supply chain attacks
- 3:55Third-party breach impacts
- 4:56MOVEit and Log4j case study
- 7:31Common attack vectors
- 8:58Five steps to resiliency
- 12:53Zero trust environment protection
- 17:11Zero trust multi-cloud SaaS
- 19:40Incident response for vulnerabilities
- 21:09Fireside chat Genentech CloudFlare
- 22:12Genentech infrastructure
- 24:41Prioritizing cybersecurity
- 25:27SolarWinds lessons
- 30:56Security efficiency vs UX
- 33:22Secure digital transformation
- 35:09CloudFlare’s zero trust role
- 38:52Shift left security tools
- 41:00Genentech AI strategy
- 44:20AI security awareness
- 45:25Future state-sponsored attacks
- 48:00Q&A
related talks
50mThe World in Crisis: Prepare for Extreme Events via Supply Chain Resilience
35mEffective Handling of Third-Party Supplier Incidents
57mInsights and Predictions: What's Next in InfoSec
41mManaging the Risk of Software Supply Chain Attacks
37mSupply Chain Attacks and the Future of Software Delivery
44mKeeping Your Software Supply Chain Healthy
41mThe Divine and Felonious Nature of Cyber Security
47mManaging Vendor Incidents