64 professional files (6 PDFs + 58 Excel workbooks) | 349+ spreadsheet tabs | 2,730+ rows of structured content | 11 organised folders
Supply chain risk has become a top-tier corporate concern. Regulators, customers, and insurers expect documented third-party risk programmes, and standards such as ISO 28000 and NIST SP 800-161 set a clear bar. Operationalising these frameworks takes more than a questionnaire: structured artefacts, continuous monitoring, and clear escalation paths all have to be in place.
WHAT YOU GET: A THREE-PHASE JOURNEY
Phase 1: Diagnose. Seven domain assessments (30 questions each, 210 total) score your maturity across SCRM Governance, Risk Assessment and Threat Modeling, Supplier Due Diligence, and related areas. You can complete the Quick Scan diagnostic in under an hour and know exactly where the biggest gaps and opportunities sit.
Phase 2: Set Goals. Five PM template workbooks with roadmaps, RACI matrices, milestone trackers, risk registers, and stakeholder communication plans. These lock in scope, timeline, and accountability before a single line of implementation work starts, which is consistently where programmes succeed or stall.
Phase 3: Implement. Nine operational runbooks and checklists covering deployment, incident response, vendor and third-party handling, and day-to-day operations. Every runbook is built to be followed by a working team, not read and filed. Pro tips, example rows, and common-mistake callouts give you the benefit of hard-won practitioner experience from the first day.
7 DOMAIN ASSESSMENTS (210 QUESTIONS)
• SCRM Governance
• Risk Assessment and Threat Modeling
• Supplier Due Diligence
• Contractual and Legal Compliance
• Secure Acquisition and Development
• Monitoring and Continuous Assessment
• Incident Response and Resilience
9 OPERATIONAL RUNBOOKS
• CISO SCRO Monthly Operations Checklist
• Geopolitical and Regulatory Shift Response Protocol
• Incident Detection to Post Mortem Checklist
• Multi Sourcing and Redundancy Planning Checklist
• Procurement to Security Handoff Protocol
• SCRM Training Delivery and Evaluation Framework
• Secure SDLC Integration Checklist
• Supplier Onboarding to Offboarding Runbook
• Third Party Risk Monitoring Runbook
The full kit also includes a practitioner-grade library of PM forms spanning all five PMBOK process groups, KPI dashboards, risk and compliance registers, and reference cards. Every template comes pre-populated with domain-specific example data so your team can start editing, not staring at blank rows. You get a consistent operating system across diagnostic, planning, delivery, and sustainment, which is how mature programmes compound improvement year over year.
WHO THIS IS FOR: Security architects, risk managers, compliance officers, and delivery teams aligning to NIST guidance.
Aligned with NIST SP 800-161.
Instant download. Start your first assessment within the hour.
Got a question about the product? Email us at support@flevy.com or ask the author directly by using the "Ask the Author a Question" form. If you cannot view the preview above this document description, go here to view the large preview instead.
Source: Best Practices in Supply Chain Resilience Excel: NIST SP 800161 Rev 1 for High Growth Tech Companies Playbook Excel (XLSX) Spreadsheet, Gerard Blokdijk
|
Receive our FREE presentation on Operational Excellence
This 50-slide presentation provides a high-level introduction to the 4 Building Blocks of Operational Excellence. Achieving OpEx requires the implementation of a Business Execution System that integrates these 4 building blocks. |