CSF 2.0: Cloud Security Alliance’s DiMaria says address supply chain, maintain flexibility in framework update

John DiMaria of the Cloud Security Alliance says the cloud aspects of supply chain security should be a critical part of NIST’s effort to update its cybersecurity framework, as companies face a pressing need to understand their responsibilities amid a historic shift to cloud-based services.

“There is a lot of outsourcing in the migration to cloud so supply chain security becomes essential,” DiMaria told Inside Cybersecurity. “Looking at the [prominent] recent breaches and ransomware attacks, a lot have to do...