Supply Chain Risk Management Clause Samples

Supply Chain Risk Management. (SCRM) 1. Ensures within its processes that requirements for Genuine ICT are imposed upon its direct suppliers, whether the direct supplier is a systems integrator, reseller or OEM. The requirements for assurance and supporting evidences shall include: a. That the contractor performs reasonable steps to ensure their SCRM Plan will be performed for ICT in its delivered and installed configuration. b. That the equipment resellers from whom the contractor purchases ICT have valid licenses for OEM equipment and software. c. That the ICT OEM is exercising quality control to ensure that counterfeit or illegally modified hardware or software components are not incorporated into the OEM product. d. That the contractor ensures traceability of assurance and evidence of genuineness of ICT back to the licensed product and component OEMs. 2. Ensures that products and components are not repaired and shipped as new products and components provided to the Government. 3. Ensures that supply channels are monitored for counterfeit throughout the product life cycle to include maintenance and repair. 4. Ensures independent verification and validation of assurances and supporting evidence, as required. The government intends to modify the contract as National Institute for Science and Technology (NIST) SCRM guidelines and standards evolve, and the contractor shall update its SCRM Plan to include such modifications at no cost to the government.

Supply Chain Risk Management. Engineer shall ensure fulfillment of this attachment’s information security clauses within its supply chain.

Supply Chain Risk Management. Castellan (i) protects against supply chain threats to the information systems, components, or service by employing security safeguards as part of a comprehensive information security strategy, including the use of secure acquisition strategies, contract, tools, and procurement methods for purchasing of information systems, components, and services from suppliers; (ii) conducts supplier reviews prior to engaging into a contractual agreement to acquire information systems, components, or services; (iii) maintains security safeguards to limit harm from potential adversaries targeting the organizational supply chain; and (iv) conducts assessments of the information systems, components, or services prior to selection, acceptance, or update.

Supply Chain Risk Management. The Supply Chain Leadership Team uses dashboard metrics, risk assessments, business continuity planning exercises, and other inputs to identify patterns and trends, and highlight risks for follow-up actions. Risk management is primarily the responsibility of the business units, with shared responsibility with JJSC for oversight and risk mitigation. Critical metrics are reported to the Supply Chain Leadership Team, to the management Compliance Committee, or to the appropriate Board committee. Reporting formerly made to the Audit Committee will now be made to the RCGC in accordance with its Charter and Operating Procedure.

Supply Chain Risk Management. Establish a plan for managing supply chain risks associated with the development, acquisition, maintenance, and disposal of Provider Systems; implement the supply chain risk management plan consistently across the organization; and review and update the supply chain risk management plan to address development changes.