MITRE's System of Trust Framework for Supply Chain Risk

The MITRE system of trust is a prototype for looking at supply chain risk. It's similar to the questionnaires that InfoSec practitioners go through when they are thinking about onboarding a vendor. This carries the imprimatur of MITRE, which has done a great job with its attack framework. So I will count that as my gold for the week.