A Large Supply Chain Security Program 

OEMs are expected to deliver secure products and services. The NIST, CISA, and MITRE frameworks are just the start. Are they enough?
Cassie Crossley describes how a very large OEM, Schneider Electric, has structured more than 13 supply chain security initiatives including R&D security, secure development, SBOMs, vulnerability management, and 3rd party risk management.