CISA's Supply Chain Risk Management Essentials

CISA's Supply Chain Risk Management (SCRM) Essentials is a guide for leaders and staff with actionable steps on how to start implementing organizational SCRM practices to improve their overall security resilience.

Additionally, to understand SCRM and the role it plays within our society, take the free, online Cyber Supply Chain Risk Management for the Public FedVTE course. This three-part course provides an introduction of what a supply chain is, how adversaries target supply chains, and steps that individuals and organizations can take to improve supply chain security. No log-in required.