Leveraging a Tailorable Holistic Perspective of Supply Chain Risk
investigations and discussions with a broad set of stakeholders in government , industry , and academia , have led to the discovery of several key elements that will enable SoT ’ s goal , including :
1 . Having a common taxonomy of supply chain risks for suppliers , supplies and services . 2 . Creating consistent supply chain security assessments and risk discussions . 3 . Informing data driven decisions about supply chain risks . 4 . Supplying a broad understanding of the available sources for supply chain risk assessment information . 5 . Supporting and promoting use of automation . 6 . Providing for cost-efficient assessments . 7 . Establishing pathways for broad adoption and training of supply chain security practices across diverse communities .
Progressing towards SoT ’ s stated goal , in a manner that can scale and allows for a wide variety of uses by different industries , organizations , and types of supply chain domains , requires a comprehensive body of knowledge ( BoK ) that details the specific supply chain security risks from suppliers , supplies , and services . SoT hosts this BoK in an automation platform that enables organizations to develop sub-sets of the most relevant of these resources as profiles that can be used to perform assessments in a standardized and consistent fashion - thereby creating opportunities for comparable discussions and assessments of supply chain security issues internally and with external partners .
The tension between seeking the broadest , most inclusive capabilities and resourcing versus servicing needs that are tailored to prioritized requirements , has motivated much of the approach to implementing MITRE ’ s System of Trust . A comprehensive and holistic body of knowledge describing every supply chain risk from suppliers , supplies , and services available to an organization , as illustrated in the left part of Figure 5-1 below , is unworkable on its own . Instead , we need a way to create a more narrowly defined , yet highly relevant , set of supply chain risks can be effectively evaluated to guide operational choices , activities , and decisions , as shown on the right side of Figure 5-1 .
Journal of Innovation 49