Title: Explain cybersecurity risks within a supply chain.
Course: Cybersecurity in Manufacturing, Advanced (13002-IV) > Section: Evaluating Vulnerabilities, Risks, and Threats in Manufacturing Systems

Explanation includes

- counterfeit parts
- malicious code injection
- use of open-source hardware and/or software
- data leakage (either by error or industrial espionage)
- chain of custody tampering
- modifications to design components.

Teacher Resources:

- Best Practices in Cyber Supply Chain Risk Management, NIST
- Supply Chain Risk Management Practices for Federal Information Systems and Organizations (NIST SP 800-161)

Process/Skill Questions:

- What is risk?
- What is chain of custody, and why is it important?