TPRM-Driven Supply Chain Cybersecurity : Connecting TPRM and supply chain security for operational resilience

Align TPRM and cybersecurity, classify supply chain risks, build a lifecycle program, and map NIST C-SCRM, ISO/IEC 27036, DORA, GDPR, and EO 14028 to evidence and audits.Key FeaturesAlign procurement, legal, and security priorities around shared risk outcomesApply a clear taxonomy for cyber, operati...

Descrizione completa

Salvato in:
Dettagli Bibliografici
Autori principali: Richardson, Eric, Pires, Filipi (Autore)
Natura: Livre numérique
Lingua:Anglais
Pubblicazione: Birmingham : Packt Publishing 2026.
Paris : Cyberlibris
Accesso online:Accès Université d'Orléans et IFPM
Nota: Couverture. https://static2.cyberlibris.com/books_upload/300pix/9781806708109.jpg
Cyberlibris (ScholarVox) corpus Informatique
Autres localisations: Voir dans le Sudoc
Edition sous un autre format:• TPRM-Driven Supply Chain Cybersecurity, Connecting TPRM and supply chain security for operational resilience, Eric Richardson, Filipi Pires, Birmingham, Packt Publishing, 2026, 1 vol. (110 p.), 978-18-0670-811-6
LEADER 03859nam a22002297a 4500
001 1477981
008 260708s2026 xxg ||| |||| 00| 0 eng d
009 PPN298022966
020 |a 9781806708109 
041 0 |a eng 
100 1 |a Richardson, Eric. 
245 1 0 |a TPRM-Driven Supply Chain Cybersecurity :  |b Connecting TPRM and supply chain security for operational resilience   |c Eric Richardson, Filipi Pires. 
260 |a Birmingham :  |b Packt Publishing. 
260 |a Paris :  |b Cyberlibris,  |c 2026. 
500 |a Couverture. https://static2.cyberlibris.com/books_upload/300pix/9781806708109.jpg 
500 |a Cyberlibris (ScholarVox) corpus Informatique 
506 |a L'accès en ligne est réservé aux établissements ou bibliothèques ayant souscrit l'abonnement. Cyberlibris 
520 |a Align TPRM and cybersecurity, classify supply chain risks, build a lifecycle program, and map NIST C-SCRM, ISO/IEC 27036, DORA, GDPR, and EO 14028 to evidence and audits.Key FeaturesAlign procurement, legal, and security priorities around shared risk outcomesApply a clear taxonomy for cyber, operational, regulatory, and reputational riskUse a lifecycle blueprint to structure assessment and ongoing oversightMap NIST C-SCRM, ISO/IEC 27036, DORA, and EO 14028 to audit evidence. Book Description: Modern organizations rely on complex vendor ecosystems, but third-party risk management (TPRM) and cybersecurity often operate in silos. This book shows how to connect vendor risk management with supply chain cybersecurity using a practical, lifecycle-driven approach. You'll design a program covering onboarding, vendor risk assessment, continuous monitoring, and offboarding. You'll begin by examining why TPRM and cybersecurity often operate in separate lanes, and what that gap costs in downtime, breach impact, and compliance exposure. Next, you'll develop a modern taxonomy of supply chain risk, including fourth-party dependencies and software supply chain concerns, so risk discussions use consistent categories and measurable assumptions. From there, you'll adopt a lifecycle-based model to structure vendor onboarding, assessment, monitoring, and offboarding-supported by vendor tiering, segmentation, and control mapping. The final chapter focuses on the regulatory blueprint: how to interpret NIST C-SCRM, ISO/IEC 27036, DORA, GDPR, and Executive Order 14028, then convert them into evidence-driven controls and audit-ready documentation. What you will learn: Learn how vendor ecosystems become attack paths; Categorize third- and fourth-party supply chain risks; Create risk tiers and segmentation based on business impact; Design a lifecycle workflow from onboarding to offboarding; Select controls using NIST and ISO supply chain guidance; Translate DORA, GDPR, and EO 14028 duties into controls; Prepare evidence packs for audits and regulator questions; Plan continuous monitoring beyond annual questionnaires. Who this book is for: This book is for cybersecurity leaders, TPRM/VRM practitioners, risk managers, and procurement professionals who need a repeatable way to evaluate and monitor vendors and critical suppliers. It also helps compliance stakeholders who need a shared, workable method to manage supplier cyber exposure. Basic familiarity with security principles and vendor management helps 
700 1 |a Pires, Filipi.  |4 aut 
776 0 |t TPRM-Driven Supply Chain Cybersecurity  |o Connecting TPRM and supply chain security for operational resilience  |f Eric Richardson, Filipi Pires  |c Birmingham  |n Packt Publishing  |d 2026  |p 1 vol. (110 p.)  |z 978-18-0670-811-6 
856 4 |5 452349901:894031414  |u https://ezproxy.univ-orleans.fr/login?url=https://univ.scholarvox.com/book/88980808  |z Accès Université d'Orléans et IFPM 
997 |0 1477981  |1 Livre numérique  |a Ressource numérique  |b INSA  |b ENSA  |c 0/Bibliothèque numérique/  |c 1/Bibliothèque numérique/ScholarVox (ebooks)/