Baseline Requirements aimed at enabling security into the design of products, functionalities and technologies.

The current COVID 19 crisis has led to an exponential increase in the numbers of WFH – people working from home – to safeguard public health. At the same time, there is an increased risk in terms of Cybersecurity.

The current COVID 19 crisis has led to an exponential increase in the numbers of WFH – people working from home – to safeguard public health. At the same time, there is an increased risk in terms of Cybersecurity.

On March 3rd, 2020, the Charter of Trust gathered its members to meet French cybersecurity policy makers in Paris. After a fruitful working lunch, members and guests joined the IBM X-Force Command Cyber Tactical Operations Center (C-TOC) simulation to experience and learn how to react to a real cybersecurity crisis.

Responsibility throughout the digital supply chain
Companies – and if necessary – governments must establish risk-based rules that ensure adequate protection across all IoT layers with clearly defined and mandatory requirements. Ensure confidentiality, authenticity, integrity, and availability by setting baseline standards, such as
– Identity and access management: Connected devices must have secure identities and safeguarding measures that only allow authorized users and devices to use them.
– Encryption: Connected devices must ensure confidentiality for data storage and transmission purposes, wherever appropriate.
– Continuous protection: Companies must offer updates, upgrades, and patches throughout a reasonable life cycle for their products, systems, and services via a secure update mechanism.

Based on this statement, the CoT members developed a common risk-based approach aligned with international norms to help improve cybersecurity and provide visibility through the supply chain. Three elements form this risk-based approach:
– Baseline requirements are common for all digital suppliers and define the fundamentals that a supplier must address in order to ensure the cybersecurity foundations for their product/service
– Supplier criticality Digital suppliers have different criticalities depending on risk factors, which are also dependent on the context viewed by the purchaser
– Verification Verification to the baseline requirements is dependent on the criticality of the supplier

The purpose of this document is to describe such a risk-based approach and its impact on the digital supply chain with a focus on the various stakeholders throughout the digital supply chain.

The Charter-of-Trust (CoT) partners have agreed to deliver next-generation products with preset cybersecurity, following a clear “Security by Default” philosophy.

The annual IBM X-Force® Threat Intelligence Index sheds light on the biggest cyber risks that organizations face today, with data and insights collected over the past year.

On February 14, 2020, the Charter of Trust celebrates its second anniversary. Much has happened since February 2018 – in the context of the charter, but above all because of the charter itself.

Being part of a global initiative sounds easy-breezy, right? It is a little more complicated than that. Think of the Charter of Trust as a global ‘community with hundreds of colleagues all around the globe – in different time zones and office environments.

How to protect your business effectively: specific measures for small and medium-sized enterprises.

Representatives presented the latest developments and results of the Charter of Trust as part of a panel discussion on digital supply chain security at the Internet Governance Forum 2019 in Berlin, Germany.

The first Associated Partner Forum of the Charter of Trust recently took place in the Austrian university city.