How to Meet Third-Party Risk Requirements of NIST 800-161 | UpGuard

This article explains NIST SP 800-161 for ICT supply chain risk management, highlights its relationship to NIST SP 800-53, summarizes the 18 control families, and provides pragmatic third-party risk management recommendations. It also outlines how UpGuard’s platform capabilities — including continuous monitoring, automated security questionnaires, vendor risk tiering, remediation validation, data leak detection, and TPRM services — can be used to support compliance with NIST 800-161 and improve supply chain security posture.