Demystifying Supply Chain Risk Assessment
[ 7 ] Martin, R.( 2026). System of Trustâ„¢-based Assessment Process. https:// sot. mitre. org / resources / papers / SoT _ based _ Assessment _ Process. pdf
[ 8 ] European Commission.( 2025). Digital Omnibus on AI Regulation Proposal. Published November 19, 2025. https:// digital-strategy. ec. europa. eu / en / policies / regulatoryframework-ai; see also European Parliament Draft Report( Kokalari / McNamara), February 5, 2026. https:// www. europarl. europa. eu / legislative-train / package-digitalpackage / file-digital-omnibus-on-ai
[ 9 ] European Union.( 2024). Article 25: Responsibilities along the AI value chain. In EU Artificial Intelligence Act. https:// artificialintelligenceact. eu / article / 25 /
[ 10 ] MITRE Corporation.( 2021). MITRE ATLAS( Adversarial Threat Landscape for Artificial- Intelligence Systems). https:// atlas. mitre. org /
[ 11 ] National Institute of Standards and Technology.( 2023). Artificial Intelligence Risk Management Framework( AI RMF 1.0), NIST AI 100-1. https:// doi. org / 10.6028 / NIST. AI. 100-1
[ 12 ] International Organization for Standardization and International Electrotechnical Commission.( 2023). ISO / IEC 42001:2023, Information technology- Artificial intelligence- Management system. https:// www. iso. org / standard / 42001
[ 13 ] Boyens, J., Smith, A., Bartol, N., Winkler, K., Holbrook, A., & Fallon, M.( 2022, updated 2024). Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations, NIST SP 800-161r1-upd1. https:// doi. org / 10.6028 / NIST. SP. 800-161r1- upd1
[ 14 ] Souppaya, M., Scarfone, K., & Dodson, D.( 2022). Secure Software Development Framework( SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities, NIST SP 800-218. https:// doi. org / 10.6028 / NIST. SP. 800-218
[ 15 ] Object Management Group.( 2025). OMG System Modeling Language( SysML), Version 2.0. https:// www. omg. org / spec / SysML / 2.0 /
[ 16 ] Object Management Group.( 2023). Structured Assurance Case Metamodel( SACM), Version 2.3. https:// www. omg. org / spec / SACM / 2.3 /
[ 17 ] BatteryPass-Ready.( 2026). Advancing Battery Passport Readiness. https:// thebatterypass. eu /
[ 18 ] Martin, R.( 2020). The Supply Chain Security System of Trust: A Framework for the Concerns Blocking Trust in Supplies, Suppliers, and Services, CUTTER BUSINESS TECHNOLOGY JOURNAL VOL. 33, NO. 5. https:// www. cutter. com / article / supply-chainsecurity-system-trust-framework-concerns-blocking-trust-supplies-suppliers-and
EDM Association – Journal of Innovation 95