(Press-News.org) College Park, Md. - The supply chain is ground zero for several recent cyber breaches. Hackers, for example, prey on vendors that have remote access to a larger company's global IT systems, software and networks.
In the 2013 Target breach, the attacker infiltrated a vulnerable link: a refrigeration system supplier connected to the retailer's IT system.
A counter-measure, via a user-ready online portal, has been developed by researchers in the Supply Chain Management Center at the University of Maryland's Robert H. Smith School of Business.
The portal is based on a new management science called "cyber supply chain risk management." It combines conventionally-separate disciplines cybersecurity, enterprise risk management and supply chain management.
Funded by the National Institute of Standards and Technology, the UMD researchers developed the formula, in part, after surveying 200 different-sized companies in various industries.
"We found that, collectively, the cyber supply chain is fragmented and stovepiped, and companies are ill-prepared to sense and respond to risks in real time," said research professor and center co-director Sandor Boyson, who collaborated on the study and portal design with faculty-colleague/center co-director Thomas Corsi, research fellow Hart Rossman and UMD-Smith CIO Holly Mann. "Just half of our subjects used an executive advisory committee such as a risk board to govern their IT-system risks."
The findings are published as "Cyber supply chain risk management: Revolutionizing the strategic control of critical IT systems" in the peer-reviewed industrial engineering journal Technovation. http://ter.ps/73f
The researchers leveraged the study into the portal. Companies can log on, cost-free, at http://cyberchain.rhsmith.umd.edu and track developing threats, plus map their IT supply chains and anonymously measure themselves against industry peers and NIST standards.
The benchmarking covers operations and allocating for cyber insurance via separate functions:
A self-evaluation exercise shows a company's structure for cyber protecting the supply chain. For example, users reply to: "To what degree is your CIO and-or IT shop isolated from, or collaborative with, your supply chain specialists who actually procure the hardware and software for your IT system?"
A special formula measures the risk levels of each company asset. The Common Vulnerability Scoring System – standard for analyzing software systems – is adapted to analyze the entire range of assets connected to the cyber supply chain.
Firms can compare corporate disclosures, exposures and vulnerabilities to those of peer companies via an insurance-risk analysis framework provided by The Willis Group. The global insurance broker's database of aggregated SEC-reported cyber attacks -- mandated for public companies – supports this tool.
The portal is scalable. About 150 various-sized companies have completed at least one or more of the aforementioned functions. Fifteen of those firms completed all three assessments and represent industries including high-tech aerospace manufacturing, telecommunication, real estate, and medical and professional services.
"The portal not only helps individual organizations understand their risk and how they can better manage it. By doing so, this bolsters the resilience and security posture of the entire ecosystem of the U.S. economy," said Jon Boyens, senior advisor for information security in NIST's computer security division. "While this ecosystem has evolved to provide a set of highly refined, cost-effective, reusable products and services that support the U.S. economy, it has also increased opportunities for adversaries and made it increasingly difficult for organizations to understand their risks."
The study is entering a fifth phase focused on federal agency-private contractor supply chains. The UMD-Smith researchers subsequently will update the portal and train managers of participating agencies and contractors to efficiently and effectively use the separate functions.
INFORMATION:
Question: When does a Tropical Cyclone drop snowfall?
Answer: When it makes landfall in India and the moisture moves over the Himalayas as Cyclone Hudhud has done. When NASA's Aqua satellite passed over the Himalayan Mountains, the MODIS instrument captured this image of snow on the ground on Oct. 16 at 0705 UTC (3:50 a.m. EDT). Cyclone Hudhud made landfall in eastern India and moved over the Himalayas dropping snowfall in Nepal and southwestern China.
INFORMATION:
Rob Gutro
NASA's Goddard Space Flight Center
...
Substance abuse is the fastest growing health concern for older adults.
New findings show that drinking levels are high enough to be concerning and tend to spike around the times older adults receive their social security checks.
These results may have prevention implications for social workers working with low-income seniors.
Substance abuse is the fastest growing health concern for older adults, a segment of the population that is likewise rapidly increasing. Heavy drinking among older persons is associated with an increased risk of health problems like diabetes, ...
Most women reduce or stop drinking alcohol upon discovery of pregnancy.
A new study looks at changes in alcohol use, and factors contributing to these changes, among women with unwanted pregnancies.
Findings indicate that most women with unwanted pregnancies quit or reduce alcohol consumption once they discover their pregnancies, and that some may be substituting alcohol for drugs once they discover their pregnancies.
Most women reduce or stop drinking alcohol upon discovery of pregnancy. However, little information exists about changes in alcohol use, and factors ...
Mexico is a nearby destination where younger U.S. residents can legally drink heavily.
However, high levels of drinking on the U.S. side are not always linked to recent travel to Mexico.
New findings show that higher levels of drinking among U.S.-Mexico border youth are closely linked to their patterns of bar attendance, but not to how they think about drinking.
Due to a legal drinking age of 18 years, cheaper alcohol, and marketing tactics of local bars that specifically target youth, Mexico is an attractive and geographically nearby destination where younger U.S. ...
Researchers know that alcohol-dependent individuals (ALC) sustain neurocognitive impairment even after detoxification.
A new study examines specific domains of cognitive recovery in conjunction with smoking status.
Findings show that smoking status influenced the rate and level of neurocognitive recovery during eight months of abstinence in the ALC group.
Numerous studies have shown that individuals with an alcohol use disorder perform worse than those without one on multiple neurocognitive domains of function following detoxification from alcohol, although the level ...
Boston, MA — Switching from nonprofit to for-profit status appears to boost hospitals' financial health but does not appear to lower the quality of care they provide or reduce the proportion of poor or minority patients receiving care, according to a new study from Harvard School of Public Health (HSPH) and Brigham and Women's Hospital.
"Critics of for-profit hospitals have argued that they are worse at providing good care to patients and that therefore we should limit them," said Ashish Jha, professor of health policy and management at HSPH and senior author of ...
Medical practices in less competitive health-care markets charge more for services, according to a study conducted by researchers at the Stanford University School of Medicine and the National Bureau of Economic Research.
The study, based on U.S. health-care data from 2010, provides important new information about the effects of competition on prices for office visits paid by preferred provider organizations, known more commonly as PPOs. PPOs are the most common type of health insurance plan held by privately insured people in the United States.
The study will be ...
Searching a health service pricing website before using the service was associated with lower payments for clinical services such as advanced imaging and laboratory tests, according to a study in the October 22/29 issue of JAMA.
Recent changes in the health care insurance market have resulted in commercially insured patients bearing a greater proportion of their health care costs. As patients have an increasing responsibility to pay for their care, they will likely demand access to prices charged for that care. Several state-administered initiatives have increased price ...
Hospital conversion from nonprofit to for-profit status in the 2000s was associated with better subsequent financial health but had no relationship to the quality of care delivered, mortality rates, or the proportion of poor or minority patients receiving care, according to a study in the October 22/29 issue of JAMA.
During the past decade, there has been increasing attention to the growing number of nonprofit or public hospitals that have become for-profit. These conversions are controversial. Advocates argue that for-profit organizations bring needed resources and experienced ...
An examination of the relationship between physician competition and prices paid by private preferred provider organizations (PPOs) for common office visits finds that more competition is associated with lower prices paid to physicians in 10 large specialties, according to a study in the October 22/29 issue of JAMA.
Physicians are increasingly moving away from solo and smaller practices toward larger organizations. These changes may be beneficial if larger practices with more resources are better able to coordinate care, adopt process improvements, increase use of information ...
