COVID-19 and Supply-Chain Risk


Managing supply-chain risks from the new coronavirus outbreak is personally important to me. While my first concern--like everyone else's--is mitigating the direct public-health risk of the COVID-19 pandemic, I have a salient concern about the health-related risks that could be introduced if the global manufacturing supply chain for medical devices is disrupted: I'm a Type I diabetic who relies on a continuous glucose monitor (CGM) device to monitor my blood sugar and an insulin pump for insulin injections. In this blog post, I explore risk-management strategies that vendors can use to prepare and account for disruptions to hardware and software supply chains--disruptions that could affect devices that end users rely on.



Supply-Chain Risk Management


The National Institute for Standards and Technology (NIST) defines the Information and Communications Technology (ICT) supply chain as a


linked set of resources and processes between acquirers, integrators, and suppliers that begins with the design of ICT products and services and extends through development, sourcing, manufacturing, handling, and delivery of ICT products and services to the acquirer.


It is important to differentiate between software supply-chain risk and software supply-chain security risk. A 2014 SEI technical note defined risk as, "the probability of suffering harm or loss." It went on to define security risk as a measure of


(1) the likelihood that a threat will exploit a vulnerability to produce an adverse consequence, or loss, and (2) the magnitude of the loss.


The case of COVID-19 will ..

Support the originator by clicking the read the rest link below.