Proactive Software Supply Chain Risk Management Framework (P-SSCRM)

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Williams, Laurie, Migues, Sammy, Boote, Jamie, Hutchison, Ben
Formato: Preprint
Publicado: 2024
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866913839437578240
author Williams, Laurie
Migues, Sammy
Boote, Jamie
Hutchison, Ben
author_facet Williams, Laurie
Migues, Sammy
Boote, Jamie
Hutchison, Ben
contents The Proactive Software Supply Chain Risk Management Framework (P SSCRM) described in this document is designed to help you understand and plan a secure software supply chain risk management initiative. P SSCRM was created through a process of understanding and analyzing real world data from nine industry leading software supply chain risk management initiatives as well as through the analysis and unification of ten government and industry documents, frameworks, and standards. Although individual methodologies and standards differ, many initiatives and standards share common ground. P SSCRM describes this common ground and presents a model for understanding, quantifying, and developing a secure software supply chain risk management program and determining where your organization's existing efforts stand when contrasted with other real world software supply chain risk management initiatives.
format Preprint
id arxiv_https___arxiv_org_abs_2404_12300
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Proactive Software Supply Chain Risk Management Framework (P-SSCRM)
Williams, Laurie
Migues, Sammy
Boote, Jamie
Hutchison, Ben
Cryptography and Security
D.2.0
The Proactive Software Supply Chain Risk Management Framework (P SSCRM) described in this document is designed to help you understand and plan a secure software supply chain risk management initiative. P SSCRM was created through a process of understanding and analyzing real world data from nine industry leading software supply chain risk management initiatives as well as through the analysis and unification of ten government and industry documents, frameworks, and standards. Although individual methodologies and standards differ, many initiatives and standards share common ground. P SSCRM describes this common ground and presents a model for understanding, quantifying, and developing a secure software supply chain risk management program and determining where your organization's existing efforts stand when contrasted with other real world software supply chain risk management initiatives.
title Proactive Software Supply Chain Risk Management Framework (P-SSCRM)
topic Cryptography and Security
D.2.0
url https://arxiv.org/abs/2404.12300