The Life Sciences Supply Chain: Managing Risk to Achieve Greater Cyber Resiliency
By Ann Chesbrough, Security Boulebard
Supply chain relationships are a necessity for the growth of life sciences organizations operating in today’s increasingly complex global markets. Without a technology-enabled view of the entire life sciences security infrastructure, these relationships can become weak links, exposing companies to an array of potentially catastrophic cyberattacks.
Recent attacks like the incident at CaptureRx, which is a technology and administrative services company, and the incident at MedNetworx, a medical software hosting company including the Aprima electronic health record system, are examples of how attackers can infiltrate the supply chain and gain access into the organization’s infrastructure based on third-party software components.
How Supply Chain Attacks Work
With attackers increasingly focused on supply-chain-style attacks, organizations must understand how to better protect themselves with a risk-based vulnerability management strategy.
Rather than targeting organizations directly,
