The SCF Supply Chain Risk Management (SCRM) domain includes controls aligned to NIST SP 800-161, CMMC SR domain requirements, and ISO 27001 supplier relationship controls. SCF controls cover C-SCRM program governance, supplier risk assessments, contractual security requirements, software and hardware component risk, and supply chain incident response. Pre-built cross-framework mappings allow organizations to satisfy multiple compliance requirements simultaneously.
%20(white).png)
.png)