Title: Explain cybersecurity risks within a supply chain.
Course: Cybersecurity in Manufacturing, Advanced (13002-IV) > Section: Evaluating Vulnerabilities, Risks, and Threats in Manufacturing Systems

Explanation includes

- counterfeit parts
- malicious code injection
- use of open-source hardware and/or software
- data leakage (either by error or through industrial espionage)
- chain of custody tampering
- modifications to design components.

Teacher Resources:

- Best Practices in Cyber Supply Chain Risk Management, NIST (https://csrc.nist.gov/CSRC/media/Projects/Supply-Chain-Risk-Management/documents/case_studies/USRP_NIST_Intel_100715.pdf)
- Supply Chain Risk Management Practices for Federal Information Systems and Organizations (NIST SP 800-161) (https://csrc.nist.gov/publications/detail/sp/800-161/final)

Process/Skill Questions:

- What is risk?
- What is chain of custody, and why is it important?