信息通信技术(Information and Communications Technology,ICT)的全球化应用推动了其供应链的全球化。ICT供应链生态系统可为政府、企业提供具有较高成本效益和可重复使用的技术方案,同时也带来一系列信息安全风险,例如潜在的恶意软件、产品脆弱性、厂商服务不到位等。如何对供应链风险进行控制,最大限度保障产品、服务及信息系统安全是当前信息 The global application of Information and Communications Technology (ICT) has driven the globalization of its supply chain. ICT supply chain ecosystem can provide governments and enterprises with more cost-effective and reusable technical solutions, but also bring a series of information security risks, such as potential malware, product vulnerability, vendor services are not in place. How to control supply chain risks to maximize the security of products, services and information systems is the current information