ICT SCRM Small and Medium-Sized Businesses Resource Hub

Information and communication technology (ICT) supply chain risks can impact businesses of all sizes. To help small and medium-sized businesses (SMBs) navigate these challenges, this resource hub provides a centralized location for all the resources developed by the ICT SCRM Task Force. These resources can assist SMBs with their establishment and conduct of supply chain risk management programs and policies.

Roadmap for Developing a Supply Chain Risk Management Program

The following roadmap offers SMBs a practical 3-step process for developing an ICT supply chain risk management program. It highlights the resources developed by the ICT SCRM Task Force and outlines actionable steps SMBs can take to manage and mitigate supply chain risks, particularly those affecting ICT products, suppliers, and services.

Step 1: Identify Risks

Resource: Securing Small and Medium-Sized Business (SMB) Supply Chains: A Resource Handbook to Reduce Information and Communication Technology Risks. The handbook: 

  • Highlights key ICT supply chain risks for SMBs, including cyber risks, providing a useful starting point for identifying risks in an SMBs enterprise;
  • Provides a deeper understanding of the risk landscape and offers practical examples and a short summary of the costs and benefits of the actionable mitigation steps; and
  • Includes use cases to help implement effective supply chain risk management practices by illustrating common ICT supply chain risk challenges and actionable measures to mitigate these risks.

Step 2: Develop a Resilient SCRM Plan

Resource: Empowering Small and Medium-Sized Businesses: A Resource Guide for Developing a Resilient Supply Chain Risk Management Plan. This guide helps SMBs build a resilient SCRM plan. The guide:

  • Considers Acquirer, Integrator, and Supplier roles when developing a SCRM plan;
  • Identifies eight steps for developing a SCRM plan; and
  • Provides links to supporting resources an SMB can use as they prepare to implement their SCRM plan.

Step 3: Apply a Vetting Process for Evaluating ICT Vendors

Resource: Operationalizing Vendor Supply Chain Risk Management Template for Small and Medium-Sized Businesses. This template captures key questions to assess an ICT supplier’s use of industry standards and best practices when purchasing ICT hardware, software, and services, helping SMBs standardize supply chain risk planning. The template:

  • Evaluates ICT vendors from the perspective of the SMB as an Acquirer of ICT products or services;
  • Evaluates ICT vendors from the perspective of the SMB as an Integrator of ICT products or services; and
  • Evaluates ICT hardware, software, and services from the perspective of the SMB as a Supplier of ICT products or services.

Resources

Want to hear more about how SMBs can benefit from these resources? Hear directly from SMBs and the authors of these resources in the following webinars: