Supply chains are dependent on third parties and face a broad range of physical and cybersecurity threats. As organisations cannot always control the security measures of their supply chain partners, IoT supply chains have become a weak link for cybersecurity.
The Enisa guidelines and accompanying report cover the whole lifespan from design to delivery to disposal, and aims to help all stakeholders involved to make better security decisions.
Enisa executive director Juhan Lepassaar said: ‘Securing the supply chain of ICT products and services should be a prerequisite for their further adoption particularly for critical infrastructure and services. Only then can we reap the benefits associated with their widespread deployment, as it happens with IoT.’
The report and guidelines can be downloaded at: bit.ly/3lWr16p.