The National Institute of Standards and Technology is developing risk management guidance on the information and communications technology supply chain. The ICT supply chain is a system of networks that includes organizations, people, processes, products and services. NIST is seeking comments from stakeholders on its draft of Special Publication 800-161, Supply Chain Risk Management Practices for Federal Information Systems and Organizations. The draft publication offers proposed guidance on identifying, assessing and mitigating supply chain risks at all levels of organizations. It will publish a final version later once it reviews comments received.”]
Source: https://www.cuinfosecurity.com/nist-drafting-supply-chain-guidance-a-6012