Notional Supply Chain Risk Management Practices for Federal Information Systems

Boyens, Jon; Paulsen, Celia; Bartol, Nadya; Shankles, Stephanie; Moorthy, Rama

doi:https://doi.org/10.6028/NIST.IR.7622

NISTIR 7622

Notional Supply Chain Risk Management Practices for Federal Information Systems

Documentation Topics

Date Published: October 2012

Author(s)

Jon Boyens (NIST), Celia Paulsen (NIST), Nadya Bartol (BAH), Stephanie Shankles (BAH), Rama Moorthy (Hatha Systems)

Abstract

This publication is intended to provide a wide array of practices that, when implemented, will help mitigate supply chain risk to federal information systems. It seeks to equip federal departments and agencies with a notional set of repeatable and commercially reasonable supply chain assurance methods and practices that offer a means to obtain an understanding of, and visibility throughout, the supply chain.

Keywords

Information and Communication Technology; ICT; ; Supply Chain; ; Risk Management; ; Acquire; ; Integrator; Supplier

Control Families

System and Services Acquisition

Documentation

Publication:
NISTIR 7622 (DOI)
Local Download

Supplemental Material:
Press Release (other)

Document History:
10/16/12: NISTIR 7622 (Final)

Topics

Security and Privacy
acquisition; cybersecurity supply chain risk management