More than half of surveyed organizations reported losing trust in legacy IT vendors, such as Microsoft, in light of recent cyberattacks that exposed severe supply chain security gaps, according to a recent report commissioned by CrowdStrike and conducted by research firm Vanson Bourne.
Over three quarters of respondents said that their organization had suffered a supply chain attack at some point in the past. In healthcare, a lack of supply chain security can lead to patient safety issues, delays, and a lack of trust between organizations and third-party vendors.
Over 40 percent of respondents reported experiencing a supply chain attack in the last 12 months, compared to 32 percent in 2018. Additionally, over 80 percent of respondents reported believing that software supply chain attacks could become one of the biggest cyber threats within the next three years.Â
Almost six in ten respondents admitted that when their organization fell victim to a supply chain attack, they did not have a thorough cyber incident response plan. Healthcare organizations are required to implement an incident response plan under HIPAA. The responsibility does not lie solely with the victims of cyberattacks. IT vendors that have a place in the supply chain also must implement adequate security measures to protect their clients and maintain trust.
