Supply Chain Risk Management

Up to three-quarters of a modern globalized (outsourced) organization’s costs rests in its supply chain. This means that threats to the supply chain can have an exponential effect on ERM. The globalized nature of the supply chain also means much of the risk mitigation is out of an organization’s direct control. Cyber threats are now thought by leading nations to be one of the greatest risks to business in the modern global, interconnected economy. This section will discuss procurement risk, assessing third-party risk, minimum security requirements, and service-level requirements.

Risks Associated with Hardware, Software, and Services

This section will discuss the risks associated with hardware, software, and the services associated with them – primarily, the risks found throughout their life cycle. A few of the risks associated with the IT life cycle are shadow IT, purchasing consumer off-the-shelf (COTS) products, risks associated...