Session 3.6f Update: DISP OSINT- Mapping out the supply chain
Tracks
| Thursday, November 14, 2024 |
| 1:30 PM - 2:30 PM |
| Swan Room |
Details
Much has been said about the supply chain of the Australian Defence force and the Defence Industry supply chain. Often assessed as a key risk as well as an avenue of approach for targeting our capacity to defend Australia and its national interest, the nature of the supply chain from a digital security standpoint is less understood. The purpose of this update is to deliver the outcomes of a research project Mercury has undertaken to quantify a number of threat vectors against the ADFs supply chain through open source intelligence gathering. During this update, I will:
1. discuss the role of the supply chain and our current methods of managing industry suppliers. I will also seek to highlight shortfalls we have observed.
2. introduce the concept of open source intelligence gathering and digital reconnaissance.
3. Present the quantitative findings against 2644 suppliers we have mapped.
4. Discuss common threats and risks we've observed across the ecosystem.
5. Discuss more effective methods for cyber risk management of suppliers
By the end of this talk, attendees will have:
1. A greater appreciation for threats and risks within the defence supply chain from a cyber security standpoint.
2. Alternative methods for assessment and assurance.
Speaker
Mr Edward Farrell
Director | Principal Consultant
Mercury Information Security Services Pty Ltd
ㅤ
Biography
Edward Farrell is a security consultant with 15 years experience in cyber security and 20 years in technology. As the director of one of Australia’s leading cyber security practices, Mercury, he has conducted or overseen the delivery of over 1000 security assessment activities and incident responses in the past 9 years. His professional highlights include lecturing at the Australian Defence Force Academy, being rated in the top 200 bug bounty hunters in 2015 and running an awesome team of security professionals.
