Dairy Processing - March/April 2024 - 52

SUPPLY CHAIN
You don't want to wait until you
are in the middle of a security incident
to start figuring out who is responsible
and what steps you should be taking
to resolve the incident. "
Tim Pope, Ever.Ag
made public or provided to a competitor can have a long-lasting,
sometimes permanent, impact to company competitiveness
and performance. "
Such incidents carry a tangible cost, not only in terms of the
ransom paid, but also in the disruption to operations.
Relationships and transparency with suppliers and thirdparty
vendors are critical to ensuring a safe food supply. When
selecting vendors anywhere along the supply chain, Pope
recommends companies conduct a security review to determine
what assets, people and data are involved for the entire supply
chain. Some basic questions should include: What areas are in
your control vs. areas controlled by a vendor or partner? Is data
encrypted in transit and at rest? Do you have an inventory of all
assets and data? Do you know who is responsible for securing
assets and data at each point in your process?
Clearly defining cybersecurity roles, responsibilities and
processes - particularly in incident response - can be a lifesaver
if a problem arises. " You don't want to wait until you are in
the middle of a security incident to start figuring out who is
responsible and what steps you should be taking to resolve the
incident, " Pope said.
When it comes to vetting new vendors, clearly identifying,
documenting and publishing security requirements is the best
place to start, according to Pope, and only consider vendors that
meet those requirements. Companies can insist that the vendor
obtain and maintain certain security certifications or request that
potential vendors provide answers to a security questionnaire
that covers requirements in the company's data security policy.
" These are all items that should be covered in your data
security policy, and you should expect any third-party vendors
meet your standard, " Pope said.
REMOTE ACCESS
The COVID-19 pandemic changed the landscape for how many
businesses operate. The food sector was no exception. One
particular area that saw a boon was the use of remote access
technology, allowing vendors and suppliers to assess and
potentially fix issues without stepping foot inside a facility. Use
of externally managed secure networks to enable remote access
has continued to grow, but not without hesitation.
Concern for cyber security with remote access is a barrier
52 MAR-APR 2024 | DAIRYPROCESSING.COM
for some companies - about 43% - to adopt the technology,
according to a survey conducted for PMMI Business
Intelligence's " 2024 Trends in Remote Services and Monitoring "
report. The main fear among end-users is malware, according to
77% of respondents. Approximately 73% also cited concerns with
supply chain attacks, despite research showing that end-users
are becoming overall less concerned with cybersecurity, as
many report strengthening networks and improving methods of
allowing remote access.
ZEROING IN
In September 2023, the International Dairy Foods Association
(IDFA), Washington, DC, entered a strategic partnership with
COMPANION BILLS TO ADDRESS
CYBERSECURITY THREATS
Legislation looking to strengthen cybersecurity protections
within the food and agriculture sectors was
introduced in both the House of Representatives and
the Senate on Jan. 25.
The bipartisan bill, known as the Farm and Food
Cybersecurity Act, was introduced by Sens. Tom Cotton
(R-Ark.) and Kirsten Gillibrand (D-NY).
The bill would identify vulnerabilities and improve
protective measures of both the government and private
groups against cyber threats.
Specifically, it would direct the US Department of
Agriculture (USDA) to conduct a study of cybersecurity
threats and vulnerabilities in the food and agriculture
sectors every two years and submit a report
to Congress.
The USDA would work with the Department of
Homeland Security, Health and Human Services, and
National Intelligence to conduct a cross-sector simulation
exercise for food-related cyber disruptions.
" Protecting our nation's farms and food security
against cyberattacks is a vital component of our national
security, " Gillibrand said.
Cotton added, " America's adversaries are seeking
to gain any advantage they can against us - including
targeting critical industries like agriculture. Congress
must work with the Department of Agriculture to identify
and defeat these cybersecurity vulnerabilities. This
legislation will ensure we are prepared to protect the
supply chains our farmers and all Americans rely on. "
The Farm and Food Cybersecurity Act's companion
bill would likewise require the USDA to lead a cybersecurity
threat study every two years and a simulation
exercise.
http://www.DAIRYPROCESSING.COM
Dairy Processing - March/April 2024

Table of Contents for the Digital Edition of Dairy Processing - March/April 2024
