Supply Chain Integrity Month

Had not heard this was a month, note here from Recorded Future, but the topic is very important.    Some good free resources at the link on related threat intelligence. 

April Is National Supply Chain Integrity Month — Reduce Third-Party Risk With Threat Intelligence By Zane Pokorny on April 26, 2019

The National Counterintelligence and Security Center (NCSC) declared April to be “National Supply Chain Integrity Month,” highlighting the growing cybersecurity risks coming from third parties in our increasingly connected world.

“Foreign intelligence entities and other adversaries are increasingly exploiting supply chain vulnerabilities to steal America’s intellectual property, corrupt our software, and surveil our critical infrastructure,” said NCSC director William R. Evanina.

“Bypassing our security perimeters, they’re infiltrating our trusted suppliers to target equipment, systems, and information used every day by the government, businesses, and individuals. The cost to our nation comes not only in lost U.S. innovation, jobs, and economic advantage, but also in reduced U.S. military readiness.”

To help combat third-party risk, the NCSC has developed new resources that outline best practices and more.  .... "