Hi All,
NCCOE/NIST just published NIST SP 1800-34, Validating the Integrity of Computing Devices.
What Is This Guide About?
Technologies today rely on complex, globally distributed, and interconnected supply chain ecosystems to provide reusable solutions. Organizations are increasingly at risk of cyber supply chain compromise, intentional or unintentional. Managing cyber supply chain risks requires, in part, ensuring the integrity, quality, and resilience of the supply chain and its products and services. This project demonstrates how organizations can verify that the internal components of their computing devices are genuine and have not been altered during the manufacturing or distribution processes.
Let Us Know What You Think!
Questions? Email us at
[email protected] with your feedback, and let us know if you would like to join the Supply Chain Assurance community of interest. We recognize that technical solutions alone will not fully enable the benefits of our solution, so we encourage organizations to share lessons learned and best practices for transforming the process associated with implementing this guide.
------------------------------
Michael Roza CPA, CISA, CIA, CC, MBA, Exec MBA
------------------------------