BSA | The Software Alliance appreciates the opportunity to provide the below comments to the National Institute of Standards and Technology’s (NIST) Special Publication (SP) 800-161, Revision 1, Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations.