increased focus on the need for robust and resilient supply chains , trustworthy partners , and trustworthy components and systems that are globally manufactured , a reliable path to an understanding of the risks that can impact trustworthiness is essential . This path must be broadly understood , shared , and usable at scale .
As a method for addressing these supply chain security challenges , MITRE developed and introduced the System of Trust™ Framework . This framework is aimed at defining , aligning , and addressing the specific concerns and risks that stand in the way of organizations ’ trusting suppliers , supplies , and service providers .
More importantly , the framework offers a comprehensive , consistent , and repeatable methodology — for evaluating suppliers , supplies , and service providers alike — that is based on our decades of supply chain security experience , deep insights into the complex challenges facing the procurement community of interest , and a broad knowledge of the relevant shared thinking on this topic in literature and standards .
Here we describe the different components of the System of Trust framework [ References , 1-3 ] and how they relate and integrate with industry and government efforts [ References , 4-16 ]. This framework enumerates supply chain risks in the areas of suppliers , supplies , and services , and provides a methodology to assess those risks in a common , repeatable way for organizations to effectively communicate with each other about supply chain risks .
Today there is wide diversity across organizations and practitioners in identifying the list of risks and approaches to risk assessment and conveying results of such assessments . From among identified aspects of supply chain security , the MITRE System of Trust ( SoT ) focuses on identifying and assessing the risks from your supplier , their supply items , and their service offerings . SoT is aimed at collecting , organizing , and sharing a common baseline of the supplier , supplies , and services risks that an organization may need to consider .
This collection of identified risks can begin as something unworkably large , highlighting the need for a methodology for selecting an operationally relevant sub-set of the body of knowledge of supply chain risks . This empowers organizations to conduct assessments in a practical , timely , and cost-efficient manner that focuses on the needs of the organization and allows for broad adoption , training , and automation .
The goal of System of Trust is to offer a comprehensive and consistent methodology that can be tailored to meet industry and company needs to address supply chain security issues , leading to better traceability , reliability , and security of supply chains . MITRE ’ s deep experience , as well as
48 July 2022