NIST readies supply-chain security 'best practices' based on industry case studies

The National Institute of Standards and Technology is preparing to release within weeks draft recommendations and “best practices” for securing the supply chain of critical infrastructure, based on recent industry case studies and an extension of research begun in 2015.

The NIST interagency report “will be issued in the next few weeks,” said Jon Boyens, acting deputy chief of NIST's Computer Security Division, at a Defense News conference on Tuesday. Boyens spoke on a panel with a Defense Department official...