A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?
A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?
To address the risks associated with procuring counterfeit hardware, a right to audit clause in vendor contracts and Statements of Work (SOWs) is essential. This clause gives the company the legal authority to inspect and verify the authenticity of the vendor's hardware and processes, thereby reducing the risk of counterfeit items being supplied. By having this clause, the company can perform audits and take necessary actions if any discrepancies or counterfeit issues are found.
An analysis would safely address if their was a lack of reliability, or authenticity when procuring hardware from a supplier to protect the company.
A penetration test would be checking the security practices of your supply chain to ensure they are not easily tampered with, but does not address the lack of reliability, & authenticity that would protect a company from the possible procurement of faulty supplies/hardware like an analysis would. An enforced acquisition policy would be a bad practice especially if the parts were faulty. A right to audit clause, & Statement of Work (SOW) is the first step to allowing an analysis, or penetration test of vendor services, & goods.
A penetration test would be checking the security practices of your supply chain to ensure they are not easily tampered with, but does not address the lack of reliability, & authenticity that would reason for the procurement of faulty supplies (hardware) like an analysis would. An enforced acquisition policy would be a bad practice especially if the parts were faulty. A right to audit clause, & Statement of Work (SOW) is the first step to allowing an analysis, or penetration test of vendor services, & goods.
I could see A or C. I'm leaning towards A.