CISSP: Certified Information Systems Security Professional

An independent third-party assessment provides objective validation that suppliers and other supply-chain participants conform to the organization’s SCRM requirements throughout the lifecycle. Self-assessments lack independence, procurement assessments are acquisition-focused, and vulnerability assessments do not evaluate the full set of SCRM requirements. NIST SP 800-161r1 identifies third-party assessments as a means of measuring adherence to enterprise C-SCRM requirements.