Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Impact Analysis Tool for Interdependent Cyber Supply Chain Risks: Draft NISTIR 8272 Available for Comment
March 13, 2020

NIST requests comments on Draft NISTIR 8272, Impact Analysis Tool for Interdependent Cyber Supply Chain Risks, which describes a prototype tool developed to show a possible solution for filling the gap between an organization's risk appetite and supply chain risk posture by providing a basic measurement of the potential impact of a cyber supply chain event. This tool does not represent a complete supply chain risk management solution, but is intended to be integrated into or used in concert with tools such as third-party management, enterprise resource planning, and supply chain management efforts. Comments related to additional functionality or other aspects of the tool may be used to develop future versions of the software.

The public comment period ends April 17, 2020. See the publication details for a copy of the draft and instructions for submitting comments.

Topics

Security and Privacy: analytics, cyber supply chain risk management

Created March 13, 2020, Updated June 22, 2020