Identifying Information Security Risks in the Supply Chain

Duration 60 Mins
Level Intermediate
Webinar ID IQW19C0324

  • Forces affecting the supply chain
  • Information security principles
  • Information security practices
  • Strategic information risk considerations
  • Tactical information risk considerations 
  • Operational information risk considerations

Overview of the webinar

Firms typically design and deploy supply chain process integration for achieving specific objectives; while simultaneously, inscribing best-practice solutions to reduce the risk of inappropriate responses to environmental conditions. Frequently, creating value from intellectual and knowledge-based assets encompasses systematizing what employees, partners and customers know, then sharing the resulting information to devise or engage best-practices. Thus, in terms of content, this webinar converts selected standards and best practices into practical applications using detailed examples. This webinar also allows organizational employees to understand various steps and processes required to initiate, document and compile supply chain security risks. Collectively, this webinar presents foundational knowledge for enabling appropriate consideration of the role information system security plays in supporting the supply chain. Supply chain risk management combines a systematic approach for identifying risk and defining the impact on an enterprise’s ability to provide goods and services. Cascading, an organization’s environment is a significant factor influencing supply chain IT risk management. Management’s business processes and IT risk assessments should assist in determining organizational control intensity. Therefore, management should determine information asset risk magnitude to ensure adequate resource allocations for threats, opportunities, and vulnerabilities that impact the institution. In this regard, supply chain IT risks can affect tangible and intangible assets, including a firm’s: image, reputation, financial instruments, consumer confidence, proprietary information, and competitive advantage. Regarding webinar format, the organization strategy for presenting supply chain information systems security risks will encompass a plan, then the benefits, and last an anecdote. Thus, Dr. Davis will start with the suggested plan of action, and then discuss the benefits of the plan, and subsequently convey an anecdote to make the plan benefits realizable.

Who should attend?

  • Risk management personnel
  • External auditors
  • Internal auditors
  • Supply chain professionals
  • Information officers
  • Compliance assessors
  • Information security officers

Why should you attend?

A firm’s climate and linked environment should reflect a culture promoting cross-process cooperation and teamwork, supporting compliance and continuous process improvement, and managing process variations well. Supply chain (external) and business processes (internal) strategies should reflect connectivity and rational selection. Thereby, the integration of information flows is a prerequisite to aligning and streamlining processes. Whereas, the integration of commodity flows lessens waste and improves the efficiency of inter-firm processes. Thus, preventively, internal and external process integration alignment with appropriate information security controls is imperative under current business environment conditions. Security threats can hinder or reduce the possibility for business and information technology (IT) objective achievement, value creation and value preservation. Designing and maintaining appropriate information security governance risk management requires proportional assessments of implemented IT general and application controls. As general and application security categories, major risks to an organization implementing and using IT are deficient logical access controls and weak network infrastructure security. Furthermore, inappropriate environmental controls, misaligned risk responses, and inadequate physical access controls are significant risks to an organization implementing and using supply chain IT. Moreover, ineffective confidential information lifecycle protection is a major risk to an organization implementing and using supply chain IT.

Faculty - Dr.Robert E. Davis

Dr. Robert E. Davis, MBA, DBA, CISA, CICA (an invited Golden Key and Delta Mu Delta member) obtained a Bachelor of Business Administration degree in Accounting and Business Law and a Master of Business Administration degree in Management Information Systems from Temple and West Chester University; respectively. In addition, during his twenty years of involvement in education, Robert acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology. Robert also obtained the Certified Information Systems Auditor (CISA) certificate — after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the Certified Internal Controls Auditor (CICA) certificate by the Institute for Internal Controls. Robert was awarded the Doctor of Business Administration degree specializing in Information Systems Management by Walden University. 

Since starting his career as an information systems (IS) auditor, Robert has provided data security consulting and IS auditing services to the United States Securities and Exchange Commission, United States Enrichment Corporation, Raytheon Company, United States Interstate Commerce Commission, Dow Jones & Company and Fidelity/First Fidelity (Wells Fargo) corporations as well as other organizations; in staff through management positions.
 

100% MONEY BACK GUARANTEED

Refund / Cancellation policy
For group or any booking support, contact: