FYI - Bob


-------- Forwarded Message --------
Subject: [EXT] CISA Releases Hardware Bill of Materials Framework to Improve Supply Chain Risk Management
Date: Mon, 25 Sep 2023 20:09:54 +0000
From: ICT_SCRM_Taskforce <[email protected]>
To: ICT_SCRM_Taskforce <[email protected]>


ICT SCRM Task Force Members, Today, the Cybersecurity and Infrastructure Security Agency (CISA) released a new product by the Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Task Force titled, A Hardware

ICT SCRM Task Force Members, 

Today, the Cybersecurity and Infrastructure Security Agency (CISA) released a new product by the Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Task Force titled, A Hardware Bill of Materials Framework for Supply Chain Risk Management. This product provides organizations with guidance on how to assess the security of hardware components in products that they have or may purchase and enables them to make risk-informed procurement decisions about ICT products.   

The HBOM Framework provides a consistent and predictable structure for developing HBOMs, a set of clearly defined data fields of components and their attributes, and a range of potential use cases that purchasers may have for using an HBOM. HBOMs are an essential tool for ICT supply chain risk management. They provide transparency and assist organizations in making security decisions about a product and how to address or respond to identified risks. Additionally, an easy-to-use, printer-friendly fact sheet is available for organizations to download and print for their event or meeting. Please watch this video to learn more: CISA Releases Hardware Bill of Materials Framework (HBOM) for Supply Chain Risk Management (SCRM) - YouTube.

For this resource and more, please visit: ICT Supply Chain Risk Management Task Force.  

 

Sincerely,

ICT SCRM Task Force 

National Risk Management Center 

Cybersecurity and Infrastructure Security Agency 

[email protected]  

 

 

Defend Today.  Secure Tomorrow.

 

Lead the National effort to understand and manage

cyber and physical risk to our critical infrastructure.

 

_._,_._,_

Links:

You receive all messages sent to this group.

View/Reply Online (#5359) | Reply To Sender | Reply To Group | Mute This Topic | New Topic
Your Subscription | Contact Group Owner | Unsubscribe [[email protected]]

_._,_._,_

Reply via email to