The hidden risks in space supply chains. [T-Minus: Space-Cyber Briefing]

This section introduces the concept of space supply chain risks, emphasizing that the vulnerabilities are mostly due to small weaknesses across various tiers rather than high-profile adversaries alone. Guest Jen Sovada discusses issues such as counterfeit parts, tampering, limited visibility into sub-tier suppliers, and vulnerabilities in firmware and software that can be altered during design, development, or deployment. The importance of recognizing the entire system—hardware, software, ground stations, and launch platforms—is highlighted, along with the challenges posed by legacy systems and the need for improved cybersecurity measures.

This part covers the rapid increase in satellite production and deployment, with companies launching hundreds of satellites annually, unlike the limited numbers in the past. Sovada explains how this proliferation heightens the risk of software glitches, deployment errors, and insider threats, especially as systems become more dynamic and software-driven. The conversation also touches on emerging threats from spectrum sharing and direct device communication with satellites, emphasizing that increased connectivity expands the threat landscape considerably.

Here, Sovada discusses the broad scope of the space ecosystem, including ground stations, launch pads, and communication links, which are all interconnected and vital for mission success. She highlights recent incidents such as the Blue Origin explosion to illustrate how hardware failures and cybersecurity issues can have cascading effects across the entire supply chain. Sovada stresses the need to consider the environment holistically and to understand potential vulnerabilities beyond just the satellite hardware.

This section addresses the level of awareness and preparedness within the space sector regarding supply chain risks. Sovada notes that many in the community mistakenly believe that cybersecurity from an IT perspective suffices, overlooking critical vulnerabilities in operational technology and legacy systems. She advocates for a paradigm shift towards greater resilience, continuous monitoring, and better security practices tailored to the unique needs of space systems, especially given the long lifespan and intertwined nature of legacy and modern hardware.

Discussion turns to the geopolitical and economic factors influencing the space supply chain. Sovada mentions the U.S. government's efforts to secure critical materials and components, recognizing that many small, specialized suppliers are essential to satellite manufacturing. She emphasizes the importance of building resilience through redundancy—having multiple suppliers for key components—to avoid bottlenecks and security vulnerabilities, and notes the tension between global supply chains and the desire for domestic security.

Sovada points out that many underestimate the variability and complexity of the entire space ecosystem. She advocates for a comprehensive approach that includes ground infrastructure, launch operations, and communication links, not just satellites. She references recent incidents like the Blue Origin explosion as examples of how multifaceted failures could have cybersecurity or structural causes, reinforcing the need for holistic risk management.

Sovada offers guidance for cybersecurity experts aspiring to enter the space sector. She highlights the importance of defense-in-depth strategies, continuous monitoring, and ensuring the integrity of both hardware and firmware. Visibility into the entire supply chain, from manufacturing to deployment, and secure design practices are key. Her overarching message is that protecting space systems requires tailored cybersecurity practices that address unique operational challenges.

In the closing segment, Sovada emphasizes that space supply chain resilience must go beyond procurement—it's integral to overall mission assurance. She underscores the interconnectedness of space systems and the critical need to understand and protect every component of the ecosystem. The episode wraps up with the host reiterating the importance of continued vigilance and secure practices in the expanding and evolving space industry.