NIST describes C-SCRM as a systematic process for managing cybersecurity risk exposure where?

Start playing free

  1. Throughout the supply chain
  2. Only inside the company's data center
  3. Only when a contract is first signed

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Security Pro Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. NIST SP 800-161 Rev. 1 Update 1, Cybersecurity Supply Chain Risk Management Practices nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-161r1-upd1.pdf Checked 2026-10-11.
  2. NIST SP 800-161 Rev. 1 Update 1, Cybersecurity Supply Chain Risk Management Practices nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-161r1-upd1.pdf Checked 2026-10-11.
  3. NIST SP 800-161 Rev. 1 Update 1, Cybersecurity Supply Chain Risk Management Practices nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-161r1-upd1.pdf Checked 2026-10-11.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game