Requirements ยท Security & privacy
NIST SP 800-161 supply chain risk management
2 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.
About the rule
What it is
NIST Special Publication 800-161, Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations, guides organizations on identifying, assessing and responding to cybersecurity risks throughout their supply chains. It is published by the National Institute of Standards and Technology for federal agencies, and other organizations use it too.
Source: NIST SP 800-161 Rev. 1 (NIST CSRC). This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.
Citations
How the products cite it
The exact wording on the product pages, with how many products use each.
- NIST SP 800-161 Rev. 1 (Cybersecurity Supply Chain Risk Management Practices) 1 product
- NIST SP 800-161 Rev. 1, Cybersecurity Supply Chain Risk Management Practices 1 product
For what it requires of your organization, read the rule itself or ask your counsel.
Products
The 2 products that support it
Software Bill of Materials (SBOM) Watchtower
The defense supply chain is vulnerable to software supply chain attacks. This platform checks software entering the DoD environment at the point of intake, decomposing binaries to find "nested dependencies" (like Log4j) and holding packages that break your supplier and provenance policies for a decision, helping protect the integrity of mission systems. Binary analysis cannot identify every component, and admission decisions remain with your designated approvers.
Lists:
- NIST SP 800-161 Rev. 1, Cybersecurity Supply Chain Risk Management Practices
Supply Chain Mapping & Risk Illuminator
Federal agencies must understand their reliance on foreign suppliers. This tool maps multi-tier supply chains to identify critical dependencies on adversarial nations or unstable regions, supporting the implementation of "Buy American" and supply chain security mandates.
Lists:
- NIST SP 800-161 Rev. 1 (Cybersecurity Supply Chain Risk Management Practices)
Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.