The National Institute of Standards and Technology (NIST) is seeking comment on new revisions to its cyber supply chain risk management guidance.
NIST in April published revised Special Publication 800-161, “Cyber Supply Chain Risk Management Practices for Systems and Organizations,” its first update since the original version in 2015. Changes to relative legislative and regulatory guidance as well as federal and industry practices prompted the need to update SP 800-161, said Jon Boyens, a senior adviser for information security at NIST and co-author of the guidance.
