Supply chain

{
  "id": "MLC-T-CYB-004134",
  "term": "Supply chain",
  "field": "Cybersecurity",
  "definition": "1. A linked set of resources and processes between multiple tiers of developers that begins with the sourcing of products and services and extends through the design, development, manufacturing, processing, handling, and delivery of products and services to the acquirer.\n\n2. Network that designs, manufactures, imports, distributes, and sells a product.\n\n3. Linked set of resources and processes between multiple tiers of developers that begins with the sourcing of products and services and extends through the design, development, manufacturing, processing, handling, and delivery of products and services to the acquirer.\n\n4. The network of retailers, distributors, transporters, storage facilities, and suppliers that participate in the sale, delivery, and production of a particular product.101\n\n5. Linked set of resources and processes between and among multiple tiers of organizations, each of which is an acquirer, that begins with the sourcing of products and services and extends through their life cycle.\n\n6. Linked set of resources and processes between and among multiple levels of organizations, each of which is an acquirer, that begins with the sourcing of products and services and extends through their life cycle.",
  "references": [
    "CNSSI 4009-2022 from OMB Circular A-130 (2016)",
    "CNSSI 4009-2022 from ISO 10377:2013",
    "NIST SP 800-18r2 from OMB Circular A-130 (2016); NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016)",
    "NIST SP 800-98",
    "NIST SP 800-53 Rev. 5; NIST SP 800-53A Rev. 5",
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/supply-chain/"
}