Acquisition Security Framework (ASF): Integration of Supply Chain Risk Management Across the System Lifecycle
Abstract
Briefing chart Supply Chain Cybersecurity Challenges Systems are increasingly software intensive and complex. Third-party components are widespread throughout every system and require an integrated acquisition, engineering, development, and operational focus to ensure sufficient security and resilience. Managing relationships with third parties is a critical success factor: A program cannot effectively manage cyber risks alone; Supply chain risk management requires collaboration.
Document Details
- Document Type
- Technical Report
- Publication Date
- Feb 01, 2023
- Accession Number
- AD1193681
Entities
People
- Carol C. Woody
Organizations
- Carnegie Mellon University