The Cybersecurity & Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) jointly published a new resource as part of their ongoing efforts to promote awareness of, and help organizations defend against, supply chain risks. The publication, Defending Against Software Supply Chain Attacks, provides recommendations for software customers and vendors as well as key steps for prevention, mitigation and resilience of software supply chain attacks.
Software supply chain attacks occur when a cyber threat actor infiltrates a software ...
Recent Updates
- Final Rules Dismantle Civil Rights Protections for Minorities, Women, Individuals with Disabilities, and Veterans
- U.S. Court of Appeals Decision Highlights Retaliation Risks During Employee Separations
- Fast Facts About the DOL Proposed Rule for Electronic Disclosures for ERISA Group Health Plans
- San Francisco Amends its Fair Chance Ordinance
- New Massachusetts Employer Notice Obligation