NIST SP 800-161 Supply Chain Risk Management Practices for Federal Information Systems and Organizations
This publication provides guidance to federal agencies on identifying, assessing, and mitigating ICT supply chain risks at all levels of their organizations.