TIM-7030 v4

Crandall, K. S. (2020). Risk assessments: A weighted score approach to improving risk management decisions. 2020 Intermountain Engineering, Technology and Computing (IETC), Intermountain Engineering, Technology and Computing (IETC), 2020, 1–5.
Increased security breaches have made it more important than ever for businesses to detect, minimize, and remove potential risks. This paper will suggest a new approach for improving risk management models that are currently in use.

Hong, T., & Kolios, A. (2020). A framework for risk management of large-scale organization supply chains. 2020 International Conference on Decision Aid Sciences and Application (DASA), Decision Aid Sciences and Application (DASA), 948–953.
This paper proposes a novel approach to supply chain risk management (SCRM), based on the creation of a risk assessment system that addresses the value of SCRM and supply chain visibility (SCV). The paper also addresses the particular risks within the manufacturing sector using quantitative analysis and empirical evidence. The paper states that supplier delays and low product quality can be considered predominant risks related to the manufacturing industry, based on survey data and a case study from Asia. However, since supply chain risks are intertwined, it is necessary to increase supply chain visibility to fully understand risk triggers that eventually lead to risk results. The system developed can be extended to various industries to alert organizations to current threats and trigger improvements in supply chain visibility, allowing risk management strategies to be modified. Organizations may use constructive risk reduction techniques to better control their exposure by identifying potential risk sources.

Greene, S. (2018). 11.1 Supply chain risk management (Lesson 12: Establish and maintain a security awareness, education, and training program) [Video]. In CISSP (2nd ed.). Pearson IT Certification.
The supply chain is the ecosystem of organizations, processes, people, and resources involved in providing a product or a service. The supply chain represents the steps it takes to get a product or service to the consumer or the end-user. The supply chain includes outsourced operations, and it definitely includes external providers.

Greene, S. (2015). 1.17 Managing supply chain risk (Lesson 1: Security and risk management) [Video]. In CISSP. Pearson IT Certification.
In the CANA Information Bulletin, we address the Security and Risk Management domain. We need to integrate security risk considerations into acquisitions, strategy, and practice. This includes supply chain participants, risk and risk management, supply chain assurance, including SSA16 reports, SysTrust, and WebTrust principles, and certification.