There are many industry standards that focus on improving operational cybersecurity. Take the National Institute of Standards and Technology (NIST) Cybersecurity Framework, the Critical Infrastructure Protection standards from the North American Electric Reliability Corporation (NERC CIP standards) or HIPAA, for example: They all offer guidance on how to protect sensitive information and keep it out of the wrong hands.

But safeguarding critical network infrastructure can begin long before a network is operational. It can be addressed during software and hardware development by building security into the processes companies use to create products, solutions and services.

And that’s exactly what the Telecommunications Industry Association’s (TIA) SCS 9001™, Cyber and Supply Chain Security Standard, hopes to achieve. It focuses on helping organizations in the information and communications technology (ICT) industry secure their supply chains and implement comprehensive security policies.

By following SCS 9001 guidance, everyone in the ICT industry—network operators, service providers, integrators, manufacturers, buyers and suppliers—can be confident that the software, hardware and other technology they develop, purchase and implement meet specific benchmarks to reduce the possibility of a cybersecurity attack.

As a certifiable standard, SCS 9001 is adaptable to any communications network across all industries and sectors. It helps organizations operationalize guidelines and frameworks from the NIST and other government entities while also becoming certified to SCS 9001.

What’s Different About SCS 9001 2.0?   

Read the Full Article Here