By Duncan Sparrell, sFractal Consulting
Cybersecurity threats have evolved significantly over the years, with cyber attackers constantly finding new ways to exploit vulnerabilities in software systems. From worms and viruses to the more recent ransomware attacks, the cost of cybercrime continues to rise. Not only are financial losses mounting, but the potential impact on critical infrastructure such as healthcare systems is also a cause for concern. Recent breaches like Log4Shell, SolarWinds, and XZ underscore the vulnerabilities within our software supply chains. These incidents highlight the critical need for understanding software supply chains, their vulnerabilities, and ways to prevent, detect, mitigate, and recover from attacks. To do this requires understanding the supply chain, which is hard in today’s environment.
The OASIS Open Supply Chain Information Modeling (OSIM) Technical Committee aims to standardize and promote information models for supply chains.