-

MITRE System of Trust™ Debuts Community Group & Risk Management Tool to Enhance Supply Chain Security

MCLEAN, Va. & BEDFORD, Mass.--(BUSINESS WIRE)--MITRE debuted its System of Trust™ risk model manager and a community engagement group comprising 30 members. Expanding from its free and open platform, System of Trust now delivers a collaborative community to identify and mitigate threats to supply chains—before they happen. Leveraging the expertise of researchers and organizations, the community will further develop the framework’s body of knowledge and enhance supply chain security.

“As aligned to our whole-of-nation approach, the MITRE System of Trust community brings together not only major chip manufacturers and IT and OT companies but also representation from financial, energy, defense, and telecom industries, as well as from government and industry associations,” said Yosry Barsoum, vice president and director, Center for Securing the Homeland, MITRE. “We are helping all parts of the supply chain ecosystem better identify their risks and build their resiliency.”

The community uses evidence-based data to determine where risks to the supply chain are and to assess the impact of those risks across business operations and concerns: financial stability, management, legal and ethics, foreign and competitor influence, service, warehousing, and delivery.

“Identifying supply chain risks that come from supplies, suppliers, service providers, etc., is a complex challenge due to the complex nature of modern supply chains,” said Wen Masters, vice president, cyber technologies, MITRE. “There is a need for a common depiction of the risks and for modeling and managing the risks. We are beginning to address this complex challenge with our System of Trust framework and with the community engagement group.”

The platform will continue to grow as the community grows.

“We’re encouraging organizations to keep identifying their lists of risks and contribute their data about how to measure those risks—and any additional insights—to the MITRE System of Trust body of knowledge,” said Robert Martin, senior principal software and supply chain assurance engineer at MITRE.

One of the new tools developed with the community’s input is the risk model manager. This web application allows organizations to explore the MITRE System of Trust’s body of knowledge and actively tailor it into profiled sub-sets of supply chain risks to address particular assessment needs and answer the associated risk measurement questions.

Supply chain organizations, suppliers, and government agencies can access and engage with the MITRE System of Trust framework at https://sot.mitre.org.

During RSA 2023, April 24-27 in San Francisco, Calif., attendees can learn more about the framework at the conference session, Creating the Standard for Supply Chain Risk, and during Meet the Expert presentations in MITRE’s booth (#4438) in the Moscone South Hall.

About MITRE

MITRE’s mission-driven teams are dedicated to solving problems for a safer world. Through our public-private partnerships and federally funded R&D centers, we work across government and in partnership with industry to tackle challenges to the safety, stability, and well-being of our nation. Learn more at mitre.org.

Contacts

Lisa Fasold, media@mitre.org

Industry:

MITRE

Release Versions
English
Hashtags
#RSAC23
#cybersecurity
#supplychain

Contacts

Lisa Fasold, media@mitre.org

Social Media Profiles
MITRE on LinkedIn
More News From MITRE

MITRE and FAA Introduce Novel Aerospace Large Language Model Evaluation Benchmark

MCLEAN, Va.--(BUSINESS WIRE)--The Federal Aviation Administration (FAA) and MITRE are introducing a new benchmark to enable the evaluation and assessment of large language models (LLMs) for aerospace tasks. Given the safety-critical nature of aerospace, it is imperative that LLMs undergo thorough evaluation prior to their integration into systems. The Aerospace Language Understanding Evaluation (ALUE) benchmark provides a crucial tool for guiding the assurance of LLMs tailored to the unique dem...

New Defense Acquisition Framework to Accelerate Technology Transition to Warfighters

MCLEAN, Va., & BEDFORD, Mass.--(BUSINESS WIRE)--The National Security Engineering Center (NSEC), a federally funded research and development center (FFRDC) operated by MITRE, unveiled the Transition Maturity Framework (TMaF) today. TMaF is a comprehensive defense acquisition framework developed to streamline the transition of innovative technologies from research labs to active deployment with U.S. warfighters. The framework addresses persistent challenges by providing a structured acquisition...

Lloyds Banking Group Becomes First U.K. Financial Services Benefactor of MITRE ATT&CK®

MCLEAN, Va. & LONDON--(BUSINESS WIRE)--Lloyds Banking Group has become the first U.K. financial services benefactor of MITRE ATT&CK® to help globally advance threat-informed defense. The MITRE ATT&CK open-source framework enables organizations to understand how adversaries operate so they can better manage cyber risks and strengthen defenses. MITRE ATT&CK is a cornerstone of Lloyds Banking Group’s cyber defense strategy, providing a unified language to describe and analyze adversary...
Back to Newsroom