The Committee on National Security Systems released a new supply chain risk management policy in late July.