top of page

NIST updates guidance for cybersecurity supply chain risk management

Help Net Security

Zeljka Zorz

The National Institute of Standards and Technology (NIST) has updated its guidance document for helping organizations identify, assess and respond to cybersecurity risks throughout the supply chain.

“[Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (C-SCRM)] encourages organizations to consider the vulnerabilities not only of a finished product they are considering using, but also of its components — which may have been developed elsewhere — and the journey those components took to reach their destination,” NIST explains.

The document’s revision is...

Get the Morning Update

Thanks for subscribing!

bottom of page