Mitigating Cyber Supply Chain Risks in Cyber Physical Systems Organizational Landscape

Abstract

Cyber supply chain (CSC) provide an organizationwith the ability to align its business processes, informationflows and data structures with other organization. However, the increase interdependencies have brought about inherent, threats, risks, attacks and vulnerabilities that adversaries maybe able to exploit when not properly mitigated. Additionally, every cyberattack on each organization increases theprobability of the risk cascading to others. The CSC risk hasincreased exponentially due to uncertainties surroundingcyberattacks and the cyber threat landscape. Recent CSCthreats have been disruptive and impacting on the smooth flowof delivery of products and services. CSC risk has beenobserved as one of the areas that impact greatly and causesbudget overruns. The aim of this paper is to mitigate CSCrisks in an organizational landscape. In particular, the paperidentifies supply inbound and outbound chain threatlandscape using a risk breakdown structure. Further, weassess the risk to gather cyber threat intelligence. Furthermore, we use the probability distribution method todetermine the CSC risks and analyze the risk probabilities andlikelihood of risk cascading impact. Our results show thatCSC risk can be neutralized using probability distributionmethods to detect and mitigate the risks and their impactlevels.