Industry Profile: Part 2 (Supply Chain Risk ) CSIA 350 6381 Cybersecurity in Business and Industry

Introduction - Provided an excellent overview of the problem of supply chain risk as it pertains to the cybersecurity industry.  Appropriately used information from 3 or more authoritative sources. 

Supply Chain Risk - Provided an excellent discussion of specific aspects of supply chain risks in the cybersecurity industry. Identified and discussed 5 or more specific examples of supply chain risk that have or will impact cybersecurity products and services. Appropriately used and cited information from 3 or more authoritative sources.

Due Diligence for Procurement & Acquisition - Provided an excellent discussion of due diligence as a risk management strategy for acquisitions and procurements of cybersecurity products and services. Addressed requirements to investigate suppliers prior to entering into contracts for products or services. Provided 5 or more examples of cybersecurity related questions that should be asked during the due diligence process. Appropriately used information from 3 or more authoritative sources.

Best Practices for Managing Global Supply Chain Risks - Provided an excellent discussion of the role that best practices should play in addressing global supply chain risks for cybersecurity products and services. Provided 5 or more examples of best practice recommendations and an evaluation of the expected benefits from implementing each of these practices.Appropriately used information from 3 or more authoritative sources. 

Summary and Conclusions - Provided an excellent summary and conclusions section which presented a summary of findings including 3 or more reasons why global supply chain risk is a problem that must be addressed by both suppliers and purchasers of cybersecurity related products and services.