Are you reevaluating your software supply chain security strategy?

Threat & Vulnerability Management Third Party Risk Management (TPRM)

We have recently updated our strategy.21%

Yes48%

No, but I expect we will reevaluate our strategy.20%

No9%

Other (please share in the comments)

467 PARTICIPANTS

3.5k views1 Upvote1 Comment

Sort by:

IT Manager in Construction2 years ago

I see most of us are planning for a change, someone can write the reason?
Is it due to AI?

Content you might like

As organizations deploy LLMs and other AI systems, how do you recommend security teams address risks such as data leakage, prompt injection and adversarial manipulation? What frameworks or practices should be prioritized to make AI security programs resilient from day one?

Is footprinting an effective way to do vulnerability management?

Very effective1%

Somewhat effective52%

Slightly effective31%

Slightly ineffective8%

Somewhat ineffective3%

Not at all effective

Not sure yet1%

View Results

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

How would you rate your level of visibility into your cloud storage platform(s)?

More than adequate14%

Adequate78%

Less than adequate7%

Completely inadequate

View Results

A common challenge in our risk-tiering framework for suppliers is that even the lowest risk tier still requires processing.
Has anyone implemented a "not relevant" risk tier in their model?
This tier would apply to vendors posing genuinely negligible security risk.