The Charter of Trust welcomes the European Commission’s intention to strengthen cybersecurity throughout the European Union and its Single Market.

CoT’s very own Principle 7 Lead John Boggie (NXP), Principle 2 Lead Michael Deckert (Siemens), and Advocacy and Comms Lead Jonathan Sage (IBM) are featured in this article on emerging supply-chain trust standards by Semiconductor Engineering magazine.

On 10th December, the Charter of Trust's Taskforce on Principle 2 "Responsibility throughout the digital supply chain" hosted a webinar that explained how the Charter's Common Risk-based Approach for the Digital Supply Chain can help companies increase the cybersecurity resilience of their supply chains.

IBM, together with several Partners of the Charter of Trust launched an initiative earlier this year to build the Charter’s threat information sharing capability related to digital infrastructures and the IoT supply chain.

The security needs of Industrial Control Systems (ICS) and Operational Technology (OT) environments are changing as the air gap is dissolving between these environments and the enterprise networks, exposing them to cybercriminals, nation-state sponsored hacking groups and all other forms of internet-borne malware.

Join us on Dec 10 and discuss with our experts how the Charter of Trust’s Common Risk-based Approach for the Digital Supply Chain can help you increase the cybersecurity resilience of your supply chain.

On 29 October, the Charter of Trust Principle 8 ‘Transparency and Response’ hosted its first-ever webinar on the cybersecurity threat landscape with leading experts in the field.

Responsibility throughout the digital supply chain
Companies – and if necessary – governments must establish risk-based rules that ensure adequate protection across all IoT layers with clearly defined and mandatory requirements. Ensure confidentiality, authenticity, integrity, and availability by setting baseline standards, such as
– Identity and access management: Connected devices must have secure identities and safeguarding measures that only allow authorized users and devices to use them.
– Encryption: Connected devices must ensure confidentiality for data storage and transmission purposes, wherever appropriate.
– Continuous protection: Companies must offer updates, upgrades, and patches throughout a reasonable life cycle for their products, systems, and services via a secure update mechanism.

Based on this statement, the CoT members developed a common risk-based approach aligned with international norms to help improve cybersecurity and provide visibility through the supply chain. Three elements form this risk-based approach:
– Baseline requirements are common for all digital suppliers and define the fundamentals that a supplier must address in order to ensure the cybersecurity foundations for their product/service
– Supplier criticality Digital suppliers have different criticalities depending on risk factors, which are also dependent on the context viewed by the purchaser
– Verification Verification to the baseline requirements is dependent on the criticality of the supplier

The purpose of this document is to describe such a risk-based approach and its impact on the digital supply chain with a focus on the various stakeholders throughout the digital supply chain.

Representatives presented the latest developments and results of the Charter of Trust as part of a panel discussion on digital supply chain security at the Internet Governance Forum 2019 in Berlin, Germany.

Emergent digital technologies like AI, edge computing, and smart data are already moving companies to make voluntary, transformative change to their operations and global supply chains... not waiting for governments to require it, or consumers to demand it.

New Siemens suppliers must comply with minimum binding cybersecurity requirements, which will be introduced step-by-step starting on February 15, 2019, and anchored in a separate, binding clause in all new contracts.

The Charter of Trust members include a "who's who" of global brands, all well-known as best in-class – the largest, the most admired, the most sustainable, the best places to work, the most recognized, and now, all are being lauded as companies dedicated to using digitalization as a path for securing the future.