Supply Chain Risk
What is Supply Chain Risk?
Risks arising from dependencies on suppliers and partners in the supply chain, including disruptions, quality issues, and security vulnerabilities.
Terms that appear alongside supply chain risk
Each of these is named in at least one of the same controls as supply chain risk. The number is how many controls name both.
- risk assessment 20 shared controls
- nist 16 shared controls
- policy 16 shared controls
- cybersecurity 15 shared controls
- audit 12 shared controls
- integrity 10 shared controls
- access control 9 shared controls
- risk management plan 9 shared controls
Frameworks that govern supply chain risk
What the standards actually require on supply chain risk
Requirements naming supply chain risk across 6 standards, quoted from the control text.
Requires a plan for managing supply chain risk for the system, reviewed and updated and protected from disclosure.
161R1-SR-2 · Supply Chain Risk Management Plan →Identify, prioritize, and assess suppliers of critical or mission-essential technologies, products, and services.
NIST800-PM-30(1) · PM-30(1) Supply Chain Risk Management Strategy | Suppliers of Critical or Mission-essential Items →Dedicated supply chain risk management controls including the C-SCRM plan, supplier assessments, and component tamper resistance.
SP800-161-CONTROLS-SR · ICT SCRM Control Family: Supply Chain Risk Management →The organisation develops an organisation-wide strategy for managing supply chain risks in the development, acquisition, maintenance and disposal of systems, components and services, implements it consistently, and reviews and updates it at a set frequency or...
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::PM-30 · PM-30 Supply chain risk management strategy →Establish a supply chain risk management team consisting of [Assignment: organization-defined personnel, roles, and responsibilities] to lead and support the following SCRM activities: [Assignment: organization-defined supply chain risk management activities].
nist-sp-800-53-revision-5-1-high::SR-2(1) · SR-2(1) Supply Chain Risk Management Plan | Establish SCRM Team →Establish a supply chain risk management team consisting of [Assignment: organization-defined personnel, roles, and responsibilities] to lead and support the following SCRM activities: [Assignment: organization-defined supply chain risk management activities].
nist-sp-800-53-rev-5-low::SR-2(1) · SR-2(1) Supply Chain Risk Management Plan | Establish SCRM Team →Questions people ask about supply chain risk
What is Supply Chain Risk?
Why is Supply Chain Risk important for compliance?
Which compliance frameworks address Supply Chain Risk?
Where can I learn more about Supply Chain Risk?
See how Supply Chain Risk applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.