1 year ago

NIST SP 800-161 revision 1 outlines a cybersecurity framework for mitigating security risks in the supply chain. The SolarWinds supply chain attack demonstrated the limitations of supply chain security in the federal government and the criticality of a robust supply chain risk management program for preventing future similar cyberattacks.

Evaluate Your Supply Chain Risks and Define a Context for Implementing a Cybersecurity Supply Chain Risk Management (C-SCRM) Program

🔲 Implement a security rating tool for rapidly identifying supply chain security risks.

🔲 Implement a real-time attack surface monitoring solution to discover emerging supply chain security risks.