Revised: Supply Chain Risk Management for Election-Related Software, Hardware, and Services

This revised version of the guide serves as an introductory guide and actionable toolkit developed by the Supply Chain Risk Management (SCRM) Working Group to help election technology providers and election officials protect against supply chain vulnerabilities. It delivers structured frameworks, background context, and detailed assessment checklists divided across three major pillars: software, hardware, and services. By addressing critical issues such as multi-factor authentication, secure coding practices, hardware provenance, and vendor risk assessments, the guide helps jurisdictions establish rigorous procurement standards and security controls to safeguard the broader elections ecosystem.