Supply Chain Risk Management: Applying Secure Acquisition Principles to Ensure a Trusted Technology Product (Internal Audit and IT Audit)

Foreword -- Why secure information and communication technology (ICT) product acquisition matters -- Building a standard acquisition infrastructure -- The three building blocks for creating communities of trust -- Risk management in the ICT product chain -- Establishing a substantive control process -- Control sustainment and operational assurance -- Building a capable supply chain operation The book presents the concepts of ICT supply chain risk management from the perspective of NIST IR 800-161. It defines a complete and correct set of processes, activities, tasks and monitoring and reporting systems.