Cyber SCRM

Cyber SCRM is a practical learning companion for cybersecurity supply chain risk management (C-SCRM). Explore structured lessons, knowledge checks, field guides, and linked primary resources covering: • NIST SP 800-161 Rev. 1, SP 1326, and the C-SCRM risk cycle • supplier due diligence, criticality, evidence, resilience, and secure software • SBOMs, VEX, provenance, cloud, hardware, incident response, and control tailoring • role-focused playbooks for legal, procurement, finance, information assurance, software development, forensics, program management, and negotiations • federal software supply-chain policy, including EO 14028 and OMB guidance The app works privately on-device: progress and checklists stay on the device, and no account is required. Educational material is not legal, regulatory, or certification advice. Consult the linked authoritative sources for decisions in your organization.