ITI/ITAPS comments in response to NIST Special Publication 800-161 Second Draft: “Supply Chain Risk Management Practices for Federal Information Systems and Organizations”
On behalf of the Information Technology Alliance for Public Sector (ITAPS)1 and the Information Technology Industry Council (ITI),2 we are responding to the request for comments on the second draft of National Institute of Standards and Technology (NIST) Special Publication (SP) 800-161, Supply Chain Risk Management Practices (SCRM) for Federal Information Systems and Organizations.