Provides a framework for collecting, developing, understanding, and implementing current best practices for supply chain risk management (SCRM). It is a practitioner's guide to SCRM and associated processes for the management of risks within the organization and its end-to-end supply chain. This standard can serve as a baseline for helping enterprises assess and address supply-chain risks and for documenting evolving practices.