CISSP Mastery
Back to Security and Risk Management
1.11 ~30 min

Apply Supply Chain Risk Management (SCRM) concepts

Overview

Third-party and product supply chains introduce tampering, counterfeit, and implant risks. Mitigate with third-party assessment/monitoring, minimum security and SLA requirements, silicon root of trust, PUF, and an SBOM.

Key topics to master

  • Risks: product tampering, counterfeits, implants
  • Third-party assessment and monitoring
  • Minimum security & service-level requirements
  • Silicon root of trust, physically unclonable function (PUF)
  • Software Bill of Materials (SBOM)