NIST SP 800-161
- Name
- NIST SP 800-161
- Publisher
- NIST
- Type
- Supply chain guidance
- What it is
Guidance on cybersecurity supply chain risk management.
- Key points
- Supplier and product risk assessment
- Contractual flow-down of requirements
- Ongoing monitoring of the supply chain
- On the exam
Third-party, fourth-party and software supply chain risk.