NIST’s Supply-Chain Security Guidance Tells Agencies: Look to FedRAMP First

The agency has spent years revising guidance for organizations to address vulnerabilities presented by vendors of software and other enterprise suppliers.