Data Privacy law and SCRM

There is a massive difference between USA privacy rights and the European Union. USA data protection is more concerned with the data's integrity as a commercial asset when the EU considers the privacy of communication and security of personal data to be fundamental rights, which is part of their EU laws. The EU puts all fundaments protection into the General Data Protection Regulation (GDPR), where the USA chooses to implement it into sectors-specific privacy and data protection regulation that work together with the individual state-level legislation such as the Health Insurance Portability and Accountability Act (HIPAA) or National Institute of Standards and Technology (NIST 800-171) and so on. Just the definition between the USA data breach, meaning unauthorized access where EU defines a data breach as any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data.

Supply Chain Risk Management (SCRM) is the coordinated efforts of an organization to help identify, monitor, detect, and mitigate threats to supply chain continuation and profitability. SCRM helps obfuscate the complex ecosystem of vendor relationships and their business partners. When your organization controls its own cyber risk, we cannot control the vendors' cybersecurity. Adding the SCRM will help with strategies and activities for continuously monitoring risk. Along with the supply chain to reduce vulnerabilities, it will scan all vendors, including other vendors you don't have a direct relationship with. SCRM determines the critical vendor and customer relationship and determines whether any single point of failure exists while providing patching cadence, network security, endpoint security, and web application security. It will help with training the employees, clearing communication, and is agile.

https://csrc.nist.gov/projects/cyber-supply-chain-risk-management

https://csrc.nist.gov/Events/2019/c-scrm-validating-the-integrity-of-server-and-clie