Software Engineering Institute

Organizations participate in a complex ecosystem of suppliers and consumers. Relationships are predicated on trust (both implicit and verifiable). Decisions made about the supply chain have profound implications for the success or failure of these organizations. Nowhere are the stakes higher than in organizations focused on national defense.

Hosted by NDIA’s Business Institute and Carnegie Mellon University’s Software Engineering Institute, the Managing for Supply Chain Resilience Course will explore the sources and types of supply chain risks and provide practical guidance on how to manage these in alignment with business strategy. The course includes an examination of prominent frameworks and standards (e.g., NIST Special Publication 171 and the Cybersecurity Maturity Model Certification) and the fundamental tools (e.g., Service Level Agreements, and Software Bill of Materials) required to effectively quantify and manage supply chain risk. No prior technical cybersecurity knowledge or experience is required.