MITIGATE: a dynamic supply chain cyber risk assessment methodology

Abstract

Supply chain services and logistic chains of the modern era have become dependent on ICT assets establishing a complex, interrelated and interactive cyber ecosystem. Isolated vulnerabilities in any of the cyber assets may have catastrophic impact in the whole supply chain. In this context, the paper proposes an evidence-driven Supply Chain Risk Assessment methodology which relies on high quality scientific and experimental based proofs and findings, (including simulation results and indicators, e.g. CVE) to optimize the evaluation and mitigation of the supply chain related risks and cyber threats.