Security risk analysis of the ICT supply chain

摘要

Global supply chain security has become a rising concern for most countries all over the world since the 2001 "911" terrorist attacks. Many countries and organizations have researched supply chain security and many initiatives have been developed and taken into practice. But most of them are focusing on the physical supply chain, which is addressed in transporting cargos. The study of information and communications technology (ICT) supply chain security is in the preliminary stage and is especially lacking in a systematic study. This paper systematically analyses the security risks to the ICT supply chain, presents a framework for the security models of the ICT supply chain, international regulations or standards for the ICT supply chain and proposes some recommendations conducive to developing a strategy for most countries on ICT supply chain security at a national level.