The National Institute of Standards and Technology is developing risk management guidance on the information and communications technology supply chain. NIST is seeking comments from stakeholders on its draft of Special Publication 800-161, Supply Chain Risk Management Practices for Federal Information Systems and Organizations. The ICT supply chain is a system of networks that includes organizations, people, processes, products and services. The House Permanent Select Committee on Intelligence issued an investigative report recommending that sensitive U.S. government systems should refrain from using equipment and component parts manufactured by two Chinese companies.”]
Source: https://www.bankinfosecurity.com/nist-drafting-supply-chain-guidance-a-6012