Certifying the Security and Resilience of Supply Chain Services

In a nutshell

Global Supply Chains are a way of life for modern business, becoming more complex and integrated. The organizations that operate within the Supply Chains have become smarter and are not only heavily dependent on Information and Communication Technologies but are also interconnected for exchanging and sharing large amounts of data. Moreover, there is still no easy, structured, standardized and trusted way to forecast, prevent and manage interrelated and propagated cybersecurity vulnerabilities and threats, in a way that takes into account the heterogeneity and complexity of today’s Supply Chains. Therefore, there is a pressing need for devising methodologies, techniques and tools for the efficient evaluation and handling of security threats and vulnerabilities supporting all involved infrastructures for the provision of critical Supply Chain services. CYRENE comes to fill this gap for devising such methodologies, techniques and tools.

Our Vision

Promote trust and confidence to the European consumers and providers/suppliers and pave the way for a competitive and trustworthy Digital Single Market.

Our mission

Lay the foundation for the implementation of the EU cybersecurity Certification Framework by

- - supporting organisations to increase their preparedness
  - improving their cooperation with each other
  - adopting appropriate steps to manage security risks
  - advancing ways to report and handle security incidents
  - enabling them to analyse relevant privacy concerns.

Our approach

CYRENE enhances control and ensures accountability in Information and Communication Technology systems, components and services across a supply chain with the use of a novel, dynamic and evidence based Conformity Assessment Process for handling security threats and vulnerabilities and for evaluating the security and resilience of Supply Chain Services.

Our objectives

Create tailored and risk-based security and privacy certification schemes for trusted supply chains of ICT systems.

Develop a novel dynamic cybersecurity and privacy conformity process that will support different types of conformity assessments.

Develop a collaborative, multi-level evidence-driven Supply Chain Risk and Privacy Assessment Approach

Specify model and simulation services to dynamically forecast, detect and prevent supply chain cyber security and privacy risks and define clear mitigation strategies

Validate the CYRENE solution through its application to real life SC services.

Develop a set of best practices for cybersecurity and privacy conformity assessment for Supply Chain infrastructures (Best Practices and Standards Enhancements)

Strengthen EU’ cybersecurity capacity and tackle future cyber security challenges

Project Members

Glossary

Here you can find key definitions used in CYRENE that are relevant to understand the project’s context and approach. The glossary includes a wide range of terms from Cyber Security to Supply Chain and all the relevant areas touched upon in CYRENE.

Subscribe to our newsletter

KEY FACTS

Project Coordinator: Sofoklis Efremidis
Institution: Maggioli SPA
Email: sofoklis.efremidis*at*gmail.com
Start: 1-10-2020
Duration: 36 months
Participating organisations: 14
Number of countries: 10

TWEETS by

@CYRENE_H2020

CYRENE_H2020 Project 7 hours ago

An interesting read! the topics we would highlight for our followers: #dataprotection is non-negotiable in international #trade agreements and EASME: Let’s talk privacy-friendly #teleworkingtools! Check them out and share your thoughts!

CYRENE_H2020 Project 8 hours ago

The CYERENE consortium Subject Matter Expert @SPHYNXTS will deploy AI-intensive processing e.g.: #privacy in the context of #AI and #Security and privacy preservation in the context of #MachineLearning enabled systems adaptability. Find out more here:

FUNDING

This project has received funding from the European Union’s Horizon 2020 Research and Innovation program under grant agreement No 952690. The website reflects only the view of the author(s) and the Commission is not responsible for any use that may be made of the information it contains.