This session will shine a light on advanced strategies for securing supply chains against zero-day vulnerabilities and other emerging threats. By examining recent incidents such as the MOVEit Transfer breach, the Desjardins Group data breach, and the Suncor Energy cyber incident, we will explore how to implement robust security measures, conduct thorough risk assessments, and establish resilient monitoring systems. Participants will gain actionable insights needed to construct a comprehensive framework for supply chain security, ensuring that both preventive and reactive measures align with the dynamic landscape of modern supply chains. Join us to learn how to fortify your defenses and protect your organization from potential disruptions and security breaches.

Key Points:

• Responding to Zero-Day Vulnerabilities: Understand the nature of zero-day vulnerabilities within supply chains and explore strategies to detect and respond to these threats swiftly and effectively.
• Comprehensive Vendor Risk Assessments: Learn how to evaluate the security posture of suppliers and third-party vendors through rigorous risk assessments and continuous monitoring. Real-world examples from Canadian companies will be discussed.
• Implementing Advanced Security Controls: Discover best practices for deploying security controls such as code signing, software integrity verification, and secure boot mechanisms to safeguard supply chain components.
• Monitoring and Incident Response: Gain insights into setting up effective monitoring systems to detect signs of compromise or suspicious activity in the supply chain, and develop robust incident response plans to mitigate the impact of breaches.