The National Institute of Standards and Technology (NIST) has updated its guidance document for helping organizations identify, assess and respond to cybersecurity risks throughout the supply chain.

“[Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (C-SCRM)] encourages organizations to consider the vulnerabilities not only of a finished product they are considering using, but also of its components — which may have been developed elsewhere — and the journey those components took to reach their destination,” NIST explains.

The document’s revision is part of NIST’s effort to help organizations put into practice mandates from Executive Order 14028, for improving United States’ cybersecurity posture.

Reposted from: HelpNetSecurity

All of these organizations that are focusing on third parties and working to set standards understand that third parties are not ‘third parties’ – they are the lifeblood of your business.