Supply Chain Risk Management

This chapter introduces the reader to the complex and evolving supply chain risk management field. It presents the five essential aspects of supply chain risk management in the most updated version of the National Institute of Standards and Technology Framework. These include: how to identify where IT professionals should manage supply chain risks, pinpointing which suppliers are crucial to supply chain risk management, developing vendor contracts that minimize supply chain risks, continually assessing supply chain risk management procedures, and testing to make sure vendors are resilient in the event of supply disruptions. A software bill of materials is simply a list of the individual components that make up any given piece of software, given almost all software developers' virtually universal use of third-party features. The chapter highlights the new subcategories of the Framework that deal with supply chain issues.