Strategy & Development

What’s your cyber strategy for your supply chain? If you don’t have one, or it needs to be overhauled, Centris can help. Injecting the discussion about cybersecurity into your supply chain is now more important than ever. The dynamic, ever-changing global business landscape has taught us many hard lessons in recent years, with the onslaught of cyber attacks being one of them.

With Centris, we’ll begin the conversation by learning all we can about your organization and your supply chain, your current and planned cyber posture and initiatives, where cyber vulnerabilities lie, and so much more. Our initial strategy & development discussions provide us - and your organization - a wealth of information in helping better assess your cyber supply chain goals and the road ahead.

NIST Cyber Framework Adoption

The well-respected and widely-known NIST Cybersecurity Framework consists of the following five “Functions” – Identify, Protect, Detect, Respond, Recover. When considered together, these Functions provide a high-level, strategic view of the lifecycle of an organization’s management of cybersecurity risk. In the end, these five “Functions'' serve as the basis for developing the roadmap and the overall architecture of an organization’s comprehensive cybersecurity program.

Whatever your industry or sector – healthcare, financial services, energy, manufacturing, defense, and more - the NIST Cybersecurity Framework is an essential ingredient for developing a cyber supply chain strategy. Because organizations will no doubt have unique risks – different threats, vulnerabilities, and overall risk tolerances - the NIST cybersecurity framework gives organizations the ability to build and customize a cybersecurity program for their exact needs. We’re NIST cybersecurity experts, having helped organizations all throughout North America in developing NIST specific cyber strategies.

NIST C-SCRM

Cybersecurity Supply Chain Risk Management (C-SCRM) is a systematic process for managing exposure to cybersecurity risks throughout the supply chain and developing appropriate response strategies, policies, processes, and procedures. Centris utilizes the NIST 800-161 publication for helping identify, assess, select, and implement risk management processes and mitigating controls across an organization to help better manage cybersecurity risks throughout the supply chain.

Coordination and Alignment

Today’s cyber challenges require a dedicated, collaborative effort throughout different divisions and departments within an organization. They also require coordination with all relevant external parties. At Centris, we institute proven measures for ensuring all parties are involved in the cyber discussion, from strategy planning to final deployment and execution. We’ll ensure that senior leadership, IT security, and risk management leaders all work together in executing a winning cyber supply chain strategy.

Implementation and Integration

Strategy is one part of the game, but execution is what really brings a project to life. At Centris, we’ll develop an action plan for integrating all aspects of your new cybersecurity strategies throughout your entire supply chain. From training internal employees to developing robust cyber policies and procedures, along with working with all external suppliers, our process is highly structured and comprehensive. We’ll create a true culture change where all parties acknowledge and support your cyber initiatives.

Policies, Procedures, Programs, and Plans

Centris has been a world-leader in designing and developing robust, highly customized information security and cybersecurity documents for helping organizations meet growing compliance needs, but also for recommended best practices. With that said, one of the most well-known, well-respected, and implemented security frameworks throughout North America is the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) set of SP 800 and SP 1800 publications for information security and cybersecurity.

Centris has years of experience developing documented policies, procedures, programs, and plans for organizations seeking NIST RMF specific documents. At Centris, we have a deep bench of experienced, capable, and professional consultants who specialize in developing well-written, highly customized policy and procedure documents for organizations all across the globe.

Awareness & Training

Putting all the pieces together for a cohesive and unified set of cyber supply chain measures requires comprehensive awareness and training. From internal employees to external suppliers - essentially anyone within your supply chain - they all need to understand your new cyber supply chain initiatives and its impact. “Institutionalizing” cyber and making a true culture change is what’s important, and with Centris’ cyber awareness and training tools, we’ll get you there.