Standard Name
NIST SP 800-161 Supply Chain Risk Management Practices for Federal Information Systems and Organizations
Industry Standard
NIST
Publication Number
SP 800-161
Standard Date
4/9/2015
Standard Link
http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-161.pdf
Securezoo Overview
The National Institute of Standards and Technology (NIST) announces the final release of Special Publication (SP) 800-161, Supply Chain Risk Management Practices for Federal Information Systems and Organizations. 

An Excerpt from SP 800-161: 

Provides guidance to federal agencies on identifying, assessing, and mitigating ICT supply chain risks at all levels of their organizations; (ii) integrates ICT supply chain risk management (SCRM) into federal agency risk management activities by applying a multi-tiered, SCRM-specific approach, including guidance on assessing supply chain risk and applying mitigation activities; and, (iii) builds on existing practices from multiple disciplines and is intended to increase the ability of organizations to strategically manage ICT supply chain risks over the entire life cycle of systems, products, and services.
 

Topics
Information Security Standards
Third-party Security