A Punch to the Supply Chain: Fighting Back to Resilience
summary
Panel argues enterprises must map, monitor and model multi‑tier supply chains, use open‑source intelligence and industry sharing, and run tabletop wargames and operational tests to move from siloed compliance to operational resilience. Vendors push a shared‑fate mindset with secure defaults, landing zones and substitutability. Surprising data point: a survey of 450 executives finds only 2% assess second/third‑tier suppliers. Actionable steps: inventory fourth/fifth parties, score OSS via OpenSSF‑style metrics, pre‑stage mitigations and test recovery across providers.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:27Why resilience
- 1:34Secure and resilient
- 5:24Operational resilience
- 14:29Visibility
- 17:24Scenarios
- 20:41Security and Agile
- 26:51Supply chain risks
- 30:35Supply chain resilience
- 32:04Cloud resilience
related talks
35mEffective Handling of Third-Party Supplier Incidents
50mThe World in Crisis: Prepare for Extreme Events via Supply Chain Resilience
25mYour Software Supply Chain is Only as Secure as its Weakest Link
26mCyber Resilience: Understanding Supply Chain Risks
41mSupply Chain Armoring: Tools and Techniques for Open Source Projects
49mScaling Software Supply Chain Source Security in Large Enterprises
48mRemaining Resilient in the Supply Chainpocalypse
36mBuilding a Trusted and Resilient Software Supply Chain