Third party software compromise exercise
Understand the risks of using third party software, discuss how your organisation would respond to the compromise of a third party software supplier.
iStock.com/Gwens Graphic Studio
Participants and timing
Allow 30 - 60 minutes to perform this exercise. It may help group activity to have a shared screen.
Essential attendees
- Senior leader – Someone who can make important business and IT decisions for your organisation, and has knowledge of business continuity plans.
- Cyber security engineer – Someone who has technical knowledge of the cyber defence activities across your IT estate, including awareness of vulnerability disclosure practice.
Desirable attendees
- Scribe – Someone to take notes during the exercise delivery.
