Kaspersky taraf\u0131ndan y\u00fcr\u00fct\u00fclen yeni k\u00fcresel ara\u015ft\u0131rmaya g\u00f6re, tedarik zinciri sald\u0131r\u0131lar\u0131 \u015firketler a\u00e7\u0131s\u0131ndan en kritik siber tehditlerden biri haline geldi. Ara\u015ft\u0131rmada, son bir y\u0131l i\u00e7inde her \u00fc\u00e7 kurumdan birinin bu t\u00fcr bir sald\u0131r\u0131ya maruz kald\u0131\u011f\u0131 belirtildi. Sald\u0131r\u0131lar\u0131n s\u0131kl\u0131\u011f\u0131 ve etkisinin artmas\u0131, \u015firketlerin bu riski y\u00f6netmesini daha da zorla\u015ft\u0131r\u0131yor.<\/p>\n
Ara\u015ft\u0131rma sonu\u00e7lar\u0131, tedarik zinciri ve g\u00fcven ili\u015fkisine dayal\u0131 risklerin azalt\u0131lmas\u0131n\u0131n \u00f6n\u00fcndeki en b\u00fcy\u00fck engellerden birinin uzman i\u015f g\u00fcc\u00fc eksikli\u011fi oldu\u011funu ortaya koydu. Bu durum, \u015firketlerin \u00fc\u00e7\u00fcnc\u00fc taraf kaynakl\u0131 zafiyetleri d\u00fczenli olarak tespit etme ve izleme kapasitesini s\u0131n\u0131rl\u0131yor.<\/p>\n
T\u00fcrkiye\u2019de ankete kat\u0131lanlar\u0131n y\u00fczde 44\u2019\u00fc, hem nitelikli BT g\u00fcvenli\u011fi \u00e7al\u0131\u015fan\u0131 eksikli\u011fini hem de birden fazla g\u00fcvenlik g\u00f6revi aras\u0131nda \u00f6ncelik belirleme zorunlulu\u011funu temel sorunlar aras\u0131nda g\u00f6sterdi. Bu tablo, g\u00fcvenlik ekiplerinin ayn\u0131 anda \u00e7ok say\u0131da tehditle ilgilenmek zorunda kald\u0131\u011f\u0131n\u0131 ve tedarik zinciri risklerinin g\u00f6zden ka\u00e7abildi\u011fini ortaya koyuyor.<\/p>\n
Ara\u015ft\u0131rma, kaynak yetersizli\u011finin yan\u0131 s\u0131ra yap\u0131sal sorunlar\u0131n da dikkat \u00e7ekici boyutta oldu\u011funu g\u00f6sterdi. T\u00fcrkiye\u2019deki i\u015fletmelerin y\u00fczde 46\u2019s\u0131, y\u00fcklenicilerle yap\u0131lan s\u00f6zle\u015fmelerde a\u00e7\u0131k BT g\u00fcvenli\u011fi y\u00fck\u00fcml\u00fcl\u00fcklerinin yer almad\u0131\u011f\u0131n\u0131 belirtti. Kat\u0131l\u0131mc\u0131lar\u0131n y\u00fczde 35\u2019i ise BT d\u0131\u015f\u0131 g\u00fcvenlik personelinin bu riskleri yeterince kavrayamad\u0131\u011f\u0131n\u0131 ifade etti.<\/p>\n
T\u00fcrkiye\u2019deki i\u015fletmelerin y\u00fczde 93\u2019\u00fc, tedarik zinciri ve g\u00fcven ili\u015fkisi risklerine kar\u015f\u0131 koruma \u00f6nlemlerini art\u0131rmalar\u0131 gerekti\u011fini kabul ediyor. Mevcut g\u00fcvenlik \u00f6nlemlerini yeterli bulanlar\u0131n oran\u0131 ise yaln\u0131zca y\u00fczde 7 seviyesinde kal\u0131yor.<\/p>\n
Ara\u015ft\u0131rmaya g\u00f6re \u00fc\u00e7\u00fcnc\u00fc taraf risklerine y\u00f6nelik mevcut uygulamalar da par\u00e7al\u0131 bir g\u00f6r\u00fcn\u00fcm sergiliyor. Hi\u00e7bir koruma y\u00f6nteminin kullan\u0131m oran\u0131 y\u00fczde 42\u2019nin \u00fczerine \u00e7\u0131kmazken, en yayg\u0131n \u00f6nlem olan iki fakt\u00f6rl\u00fc kimlik do\u011frulama bile T\u00fcrkiye\u2019de kat\u0131l\u0131mc\u0131lar\u0131n yaln\u0131zca y\u00fczde 26\u2019s\u0131 taraf\u0131ndan kullan\u0131l\u0131yor.<\/p>\n
Kurulu\u015flar\u0131n yaln\u0131zca y\u00fczde 42\u2019si, y\u00fcklenicilerinin siber g\u00fcvenlik duru\u015funu d\u00fczenli olarak g\u00f6zden ge\u00e7iriyor. Bu durum, i\u015fletmelerin yakla\u015f\u0131k \u00fc\u00e7te ikisinin i\u015f ortaklar\u0131n\u0131n g\u00fcvenli\u011fi konusunda s\u00fcrekli g\u00f6r\u00fcn\u00fcrl\u00fck sa\u011flayamad\u0131\u011f\u0131n\u0131 ve ekosistemlerindeki geli\u015fen zafiyetlere kar\u015f\u0131 savunmas\u0131z kald\u0131\u011f\u0131n\u0131 ortaya koyuyor.<\/p>\n
K\u00fcresel bulgular, daha \u00f6nce tedarik zinciri ve g\u00fcven ili\u015fkisine dayal\u0131 sald\u0131r\u0131lara maruz kalan \u015firketlerin daha g\u00fc\u00e7l\u00fc g\u00fcvenlik al\u0131\u015fkanl\u0131klar\u0131 geli\u015ftirdi\u011fini g\u00f6steriyor. Tedarik zinciri sald\u0131r\u0131s\u0131ndan etkilenen \u015firketlerin y\u00fczde 56\u2019s\u0131 s\u0131zma testi sonu\u00e7lar\u0131n\u0131 talep ederken, g\u00fcven ili\u015fkisi ihlali ya\u015fayan \u015firketlerde end\u00fcstri standartlar\u0131na uyumluluk kontrollerine \u00f6ncelik verenlerin oran\u0131 da y\u00fczde 56 oldu. Bu \u015firketlerin y\u00fczde 53\u2019\u00fc ise y\u00fcklenicilerin kendi tedarik zinciri politikalar\u0131na daha fazla \u00f6nem veriyor.<\/p>\n
Kaspersky G\u00fcvenlik Operasyonlar\u0131 Merkezi Ba\u015fkan\u0131 Sergey Soldatov, g\u00fcvenlik ekiplerinin kapasitesinin \u00fczerinde \u00e7al\u0131\u015fmas\u0131n\u0131n \u015firketleri tedarik\u00e7i ekosisteminde sessizce ilerleyen tehditlere kar\u015f\u0131 savunmas\u0131z b\u0131rakt\u0131\u011f\u0131n\u0131 s\u00f6yledi.<\/p>\n
Soldatov, personel eksikli\u011fi ve acil g\u00f6revlere \u00f6ncelik verilmesinin uzun vadeli dayan\u0131kl\u0131l\u0131k stratejilerini geri plana itti\u011fini vurgulayarak, bu d\u00f6ng\u00fcn\u00fcn k\u0131r\u0131lmas\u0131 i\u00e7in standartla\u015ft\u0131r\u0131lm\u0131\u015f y\u00fcklenici de\u011ferlendirmelerinden ekipler aras\u0131 fark\u0131ndal\u0131\u011f\u0131n art\u0131r\u0131lmas\u0131na kadar daha b\u00fct\u00fcnle\u015fik ve tutarl\u0131 stratejilerin benimsenmesi gerekti\u011fini belirtti. Soldatov\u2019a g\u00f6re, tedarik zinciri g\u00fcvenli\u011fi t\u00fcm i\u015f a\u011f\u0131 genelinde payla\u015f\u0131lan ve hesap verebilir bir sorumluluk haline gelmeli.<\/p>\n
Kaspersky, tedarik zinciri risklerini azaltmak isteyen \u015firketlere \u00e7e\u015fitli \u00f6nerilerde bulundu. Buna g\u00f6re i\u015fletmelerin y\u00f6netilen g\u00fcvenlik hizmetlerinden yararlanmas\u0131, siber g\u00fcvenlik e\u011fitimlerine yat\u0131r\u0131m yapmas\u0131, tedarik\u00e7ileri s\u00f6zle\u015fme \u00f6ncesinde kapsaml\u0131 \u015fekilde de\u011ferlendirmesi, s\u00f6zle\u015fmelere a\u00e7\u0131k g\u00fcvenlik y\u00fck\u00fcml\u00fcl\u00fckleri eklemesi ve tedarik\u00e7ilerle g\u00fcvenlik konusunda daha g\u00fc\u00e7l\u00fc i\u015f birli\u011fi kurmas\u0131 gerekiyor.<\/p>\n
\u015eirketlerin tedarik zinciri risklerini azaltabilmesi ve i\u015f s\u00fcreklili\u011fini g\u00fcvence alt\u0131na alabilmesi i\u00e7in, \u00f6nleyici tedbirlerin kurum genelinde uygulanmas\u0131 ve tedarik\u00e7i-y\u00fcklenici ili\u015fkilerinin stratejik bak\u0131\u015f a\u00e7\u0131s\u0131yla ele al\u0131nmas\u0131 gerekti\u011fi vurgulan\u0131yor.<\/p>\n","protected":false},"excerpt":{"rendered":"
Kaspersky\u2019nin k\u00fcresel ara\u015ft\u0131rmas\u0131, tedarik zinciri ve g\u00fcven ili\u015fkisine dayal\u0131 siber sald\u0131r\u0131lara kar\u015f\u0131 \u015firketlerin en b\u00fcy\u00fck a\u00e7mazlar\u0131ndan birinin nitelikli BT g\u00fcvenli\u011fi personeli eksikli\u011fi oldu\u011funu ortaya koydu. T\u00fcrkiye\u2019de kat\u0131l\u0131mc\u0131lar\u0131n y\u00fczde 44\u2019\u00fc uzman eksikli\u011fi ve g\u00fcvenlik \u00f6nceliklerinin fazlal\u0131\u011f\u0131n\u0131 temel engeller aras\u0131nda g\u00f6sterdi.<\/p>\n","protected":false},"author":2,"featured_media":14013,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[5424,2668,2082,5423,2391],"class_list":["post-14012","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji","tag-btguvenligi","tag-kaspersky","tag-siberguvenlik","tag-sibersaldiri","tag-tedarikzinciri"],"yoast_head":"\n