A chain of links running from an abandoned free component by an unknown author, through the plugin maker, a trusted plugin update and the shop platform, to Marlow & Vale at the end; the weak link is cracked at the upstream end where nobody looks, and the compromise rides along the chain on trust. Below, the list of what the shop actually depends on and where each came from, and what a small firm can do: depend on less, prefer reputable maintained suppliers, limit what each can reach, update carefully and plan for the day it happens.

CY-BEGINNER-063Beginner · Supply Chain Security

The Chain — How a Supply-Chain Compromise Reaches You, and What a Small Firm Can Do

The attack does not come from a stranger. It rides in on a software update, a plugin, a component you installed because you trusted its source. Why your chain is longer than you think, why you inherit your suppliers' security, and what a small firm can actually do.

11 hours8 chapters32 lessons225 activities8 labs

What you'll learn

See that your chain runs far past the vendors you chose, and that a compromise rides in on something you trusted.
Understand that you inherit your suppliers' security, and why the update is the moment of trust.
Accept you cannot verify the whole chain, know what you depend on, and find your weakest link.
Do the five achievable things: depend on less, prefer maintained, update carefully, limit reach, and plan for compromise.

Price:৳5,000