The Open Group Security Forum is thrilled to announce that the Open FAIR™ Certification Program has officially reached more than 1000 Certified People! This milestone represents tremendous growth around Open FAIR and indicates widespread acceptance of the standard and approach of Open FAIR. This milestone is particularly impressive because roughly 18 months ago, the Open FAIR Certification Program had 600 Certified People.
A Shared Language for Supply Chain Security
In the world of technology, there are paradigms of language that arise organically and artificially over time. Necessity requires a shared mode of communication for ideas and as a result, descriptors, nouns, and technical designators are created and shared. The problem arises when certain words acquire a surfeit of meaning, so much so that they paradoxically become less meaningful. There are many examples of this but for our purposes, we’re going to look at “Supply Chain Security”.
Solorigate: A case study for why supply chain security is critical for governments and businesses
By Jim Hietala (VP, BD and Security), Andras Szakal (VP and CTO), John Linford Security and OTTF Forum Director) – The Open Group
In potentially the most damaging cyber-supply chain attack ever, a leading IT systems management vendor became the latest hi-tech company to suffer a major cybersecurity breach with wide-reaching consequences. The malware that caused the attack has been dubbed SUNBURST by Microsoft and code-named Solorigate by FireEye, the security consulting firm that uncovered the breach after falling victim to it late last year.
After successfully infiltrating the development environment, attackers were able to observe and learn how to subvert the vendor’s development and operations pipeline. Hackers were then able to maliciously taint the vendor’s product by planting a sophisticated trojan. Once the software, which required broad systems access, was installed in customers’ environments, the attackers were able to leverage the tainted software to exfiltrate sensitive information from within an organization’s network.
Welcome to our New VP & CTO – Andras Szakal
The Open Group is proud to announce that Andras Szakal will be taking the role of Vice President and Chief Technology Officer. He will be responsible for leading the company’s technical strategy and strategic technical vision for evolving standards.
Updates to the Open FAIR™ Body of Knowledge, Part 3
The Open Group Security Forum is thrilled to announce the publication of an update to the Open FAIR™ Body of Knowledge (BoK). The Open FAIR BoK is comprised of The Open Group Risk Taxonomy (O-RT) Standard and The Open Group Risk Analysis (O-RA) Standard. The Open Group initiated a standards effort regarding FAIR ~10 years ago, and these standards define the official, open, vendor-neutral and consensus-developed definition of FAIR.
This blog post is the third of three in a series to describe updates to the Open FAIR™ Body of Knowledge. It will describe specific updates to O-RT to bring it to Version 3.0. The first post described revisions made to both O-RA and O-RT for consistency between the documents; the second post described specific updates to O-RA to bring it to Version 2.0.
The Open Group ‘Digital-First’ Virtual Event October 26 – 29, 2020 – Highlights
In the ongoing transition to Digital-First, an increasing number of technology executives, managers, and practitioners are looking for new approaches that will help them to make sense of the evolving business landscape and deliver digital products and services.
As an organization that is known for solving business issues through global industry collaboration, The Open Group hosted its third virtual event October 26-29, 2020, which provided over 3,300 registrants with the opportunity to discover the critical digital standards that enable a smooth transition to a Digital-First enterprise.