3 Comments
Apr 26Liked by Naveen Agarwal, Ph.D.

Also re purchase controls: For software, it's almost more essential. This is why analysis of the software you use for vulnerabilities is so essential. You do not want to be the reason your client is unable to operate because of an undetected vulnerability in the code. Especially if a hospital is the victim of the attack.

Evaluate all packages you include in your software and keep an eye on it. There are tools out there you can use to do this.

Expand full comment
author

Thank you for sharing this insight Rafael!

Expand full comment
Apr 26Liked by Naveen Agarwal, Ph.D.

"Have to be able to speak up" -- that can be a MAJOR problem. Absolute candor is absolutely essential when it comes to articulating risks. Especially the ones the C suite needs to hear about but doesn't want to.

Expand full comment