Supply Chain Security Attacks

Circular Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt Supply Chain Security Attacks 24 supply chain attacks were reported from January 2020 to early July 2021 (ENISA, July 2021). Within the context of a Supply Chain Attack, supplier assets are targeted and compromised by threat actors, which would then facilitate further attacks on other supplier and/or customer assets through the supply chain. This attack model has reportedly been gaining momentum. The European Union Agency for Cybersecurity (ENISA) has just published a Threat Landscape Report specifically on Supply Chain Attacks that provides valuable information on trends, case studies and recommendations. The MFSA would like to emphasise the importance of the careful consideration of threats associated with Supply Chain Attacks within the risk management processes of regulated financial entities including from an outsourcing perspective. Regulated financial entities should employ continuous monitoring to identify potential threats to, and vulnerabilities in, their Information and Communications Technologies, in a timely manner, whilst having sound patch management processes and practices in place. Regulated financial entities may request further information by sending an email to the Supervisory ICT Risk and Cybersecurity function within the MFSA on sirc@mfsa.mt. 03 August 2021