Supply Chain Risk
What is Supply Chain Risk?
Risks arising from dependencies on suppliers and partners in the supply chain, including disruptions, quality issues, and security vulnerabilities.
Terms that appear alongside supply chain risk
Each of these is named in at least one of the same controls as supply chain risk. The number is how many controls name both.
- risk assessment 20 shared controls
- nist 16 shared controls
- policy 16 shared controls
- cybersecurity 15 shared controls
- audit 12 shared controls
- integrity 10 shared controls
- access control 9 shared controls
- risk management plan 9 shared controls
Frameworks that govern supply chain risk
What the standards actually require on supply chain risk
Requirements naming supply chain risk across 6 standards, quoted from the control text.
Requires a plan for managing supply chain risk for the system, reviewed and updated and protected from disclosure.
161R1-SR-2 · Supply Chain Risk Management Plan →Dedicated supply chain risk management controls including the C-SCRM plan, supplier assessments, and component tamper resistance.
SP800-161-CONTROLS-SR · ICT SCRM Control Family: Supply Chain Risk Management →Requires a supply chain risk management policy with supporting procedures to be developed, approved, disseminated to defined personnel, owned by a named official, and reviewed and updated on a defined frequency and after defined events.
NIST800-SR-1 · Policy and procedures for supply chain risk management →Develop a C-SCRM plan for managing supply chain risks for systems, components, and services; review and update at defined frequency.
SR-2 · Supply Chain Risk Management Plan (SR-2) →Develop a C-SCRM plan for managing supply chain risks for systems, components, and services; review and update at defined frequency.
SR-2 · Supply Chain Risk Management Plan (SR-2) →Develop a C-SCRM plan for managing supply chain risks for systems, components, and services; review and update at defined frequency.
SR-2 · Supply Chain Risk Management Plan (SR-2) →Questions people ask about supply chain risk
What is Supply Chain Risk?
Why is Supply Chain Risk important for compliance?
Which compliance frameworks address Supply Chain Risk?
Where can I learn more about Supply Chain Risk?
See how Supply Chain Risk applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.