Cyber Supply Chain - Risk Mgmt. (CSC-RM)
- NIST SP 800-161 guidance
- Integration of CSC-RM into organization-wide risk management practices
- CSC-RM goal and objectives
- Capability development support:
- Team roles and responsibilities
- Defined work process
- Recommended documentation
- Cyber supply chain threat examples
- Multi-tiered risk management approach
- Relevant security controls:
- 19 Families - 126 controls
- Security life cycle management