1-11.2 Supply Chain Risk Management and Mitigation

Question 1

A cryptographic hardware security module used for supply chain security

Answer 1

Silicon root of trust (SRT)

Question 2

Unique and difficult-to-replicate hardware identifier

Answer 2

Physically Unclonable Function (PUF)

Question 3

A detailed list of components, libraries, cryptographic signatures, and metadata used in the development of a software application

Answer 3

Software Bill of Material (SBOM)

Question 4

Agreement that protects data from unauthorized use and disclosure during and post-relationship

Answer 4

Non-Disclosure Agreement (NDA)

Question 5

An agreement that codifies service and support requirements

Answer 5

SLA