Which of the following can the manufacturing company implement to ensure the third-party service provider meets this requirement?

A manufacturing company uses a third-party service provider for Tier 1 security support. One of the requirements is that the provider must only source talent from its own country due to geopolitical and national security interests.

Which of the following can the manufacturing company implement to ensure the third-party service provider meets this requirement?
A . Implement a secure supply chain program with governance.
B . Implement blacklisting lor IP addresses from outside the county.
C . Implement strong authentication controls for at contractors.
D . Implement user behavior analytics tor key staff members.

View Answer

Answer: A

Explanation:

A secure supply chain program is a set of processes and practices that aim to protect the supply chain from various risks, such as cyberattacks, data breaches, fraud, theft, sabotage, or natural disasters1. A secure supply chain program can help to ensure the integrity, availability, and confidentiality of the products, services, data, and systems involved in the supply chain. A secure supply chain program with governance means that there are clear roles, responsibilities, policies, procedures, and controls for managing the security of the supply chain. This can help to monitor and enforce the compliance of the third-party service provider with the requirement to source talent from its own country. A secure supply chain program with governance can also help to identify and mitigate any potential threats or vulnerabilities in the supply chain. Implementing blacklisting for IP addresses from outside the country (B) may not be sufficient or effective, as IP addresses can be spoofed or bypassed by attackers. Implementing strong authentication controls for all contractors © may not be relevant or adequate, as authentication controls do not prevent the sourcing of talent from other countries. Implementing user behavior analytics for key staff members (D) may not be applicable or useful, as user behavior analytics do not verify the origin or location of the talent.

Reference: 1: https://www.ibm.com/blog/what-is-supply-chain-security/