
This Framework addresses risk topics relevant to the reliance on others who make risk decisions about matters in which they are not the risk owners. The Framework also addresses means to identify and county supply chain attacks that can exploit products and processes throughout the supply chain lifecycle.