Trend Micro’s Tom Kellermann says many organizations are neglecting that of their strategic partners’ security measures. The criminal community is very much targeting managed service providers to conduct what’s called “island-hopping” from that service provider into your ecosystem. The FBI’s number-one criminal priority is cyber now – less than one percent of these folks are actually successfully prosecuted. The onus, then, is on organizations to validate their partners’ service level agreements, to ensure that attackers cannot sneak in through an unguarded back door.”]
Source: https://www.cuinfosecurity.com/secure-virtual-supply-chain-a-5836