If you are part of the defense industrial base, what you build ends up in a system or device a service member depends on in situations where there cannot be any question about quality and integrity.

This playbook is designed to walk you through the steps necessary to improve the security of your supply chain in a sound and verifiable fashion. It is derived from NIST Special Publication (SP) 800-161 Rev. 1, “Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations.”[1]

Every play starts with a goal and a reference to a tab in the playbook’s accompanying Supply Chain Evidence Workbook.

[1] https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-161r1-upd1.pdf