Don't Be the Weak Link in the Supply Chain

The video discusses SPX's approach to supply chain security, highlighting the challenges of achieving 100% security due to diverse business segments and the complexity of IoT. It covers vendor selection, regulatory compliance, and balancing business growth with security needs. The video also addresses handling security questionnaires, cloud security challenges, and improving internal security practices through DevOps and training. It emphasizes the importance of transparency, flexibility, and continuous improvement in security processes.

What is one of the main reasons SPX cannot achieve 100% security in its supply chain?

• Government regulations

• Lack of technology

• Diversity of business segments

• Insufficient funding

How does SPX assist smaller suppliers in improving their security?

• By ignoring their security posture

• By taking over their security operations

• By offering consulting on minimum viable controls

• By providing financial aid

Why is the IoT space considered challenging for security?

• It is heavily regulated

• It lacks common standards

• It is not widely used

• It is too expensive

What is a significant challenge in the IoT space according to SPX?

• Overabundance of regulations

• Absence of clear security standards

• Lack of consumer demand

• High cost of devices

What approach did SPX take when faced with a 20-page security requirement from a large utility company?

• They refused to do business with the company

• They immediately complied with all requirements

• They redlined the contract and discussed a roadmap

• They ignored the requirements

How does SPX ensure continuous improvement in security?

• By reducing security measures

• By setting a roadmap and achieving goals over time

• By ignoring past mistakes

• By firing non-compliant employees

What is a key focus for SPX in improving internal security practices?

• Increasing the number of security personnel

• Outsourcing all security tasks

• Reducing security budgets

• Implementing DevOps and secure code training

What is a common issue when SPX tries to implement new security processes?

• Processes not sticking in the real world

• Over-regulation

• Lack of interest from executives

• Too much funding

What is a critical factor in SPX's approach to supplier security?

• Immediate compliance with all demands

• Trust but verify approach

• Complete control over suppliers

• Ignoring smaller suppliers

What is a common misconception among business executives regarding security?

• Security is only a technical issue

• Security is only for large companies

• Security is not important

• Security is too expensive