U.S. Department of Veterans Affairs (VA)
- Office of Acquisition and Logistics (OAL): https://www.va.gov/oal/about/logistics.asp
- Office of Procurement, Acquisition and Logistics (OPAL): https://www.va.gov/opal/index.asp
National Institute of Standards and Technology (NIST)
- Supply Chain Risk Management Practices for Federal Information Systems and Organizations: https://csrc.nist. gov/publications/detail/sp/800-161/final
- Security and Privacy Controls for Information Systems and Organizations: https://csrc.nist.gov/publications/ detail/sp/800-53/rev-5/final
U.S. Department of Commerce
National Telecommunications and Information Administration (NTIA)
- C-SCRIP (Communications Supply Chain Risk Information Partnership): https://www.ntia.doc.gov/cscrip
Office of the Director of National Intelligence
The National Counterintelligence and Security Center
- Supply Chain Risk Management: https://www.dni.gov/index.php/ncsc-what-we-do/ncsc-supply-chain-threats
- Software Supply Chain Attacks: https://www.dni.gov/files/NCSC/documents/supplychain/Software_Supply_ Chain_Attacks.pdf
- National Supply Chain Integrity Month – Call to Action – Best Practices: https://www.dni.gov/files/NCSC/ documents/supplychain/SC_Best_Practices_Final_2021.pdf
- National Supply Chain Integrity Month – Call to Action – Framework for Assessing Risks: https://www.dni.gov/ files/NCSC/documents/supplychain/Framework_for_Assessing_Risks_-_FINAL_Doc.pdf
- Supply Chain Risk Management: Reducing Threats to Key U.S. Supply Chains: https://www.dni.gov/files/NCSC/ documents/supplychain/20200925-NCSC-Supply-Chain-Risk-Management-tri-fold.pdf
Cybersecurity & Infrastructure Security Agency
- Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM): https://www.cisa. gov/supply-chain
- SCRM Essentials: The Leader’s Guide: https://www.cisa.gov/sites/default/files/publications/ict_scrm_ essentials_508.pdf
Gartner
- A private organization with leading privacy and security expertise Supply Chain Risk Management: https://www.gartner.com/en/supply-chain/insights/supply-chain-risk- management
