NIST releases Second Public Draft for Supply Chain Traceability

The NIST National Cybersecurity Center of Excellence (NCCoE) has released a second public draft of NIST Internal Report 8536, Supply Chain Traceability: Manufacturing Meta-Framework for public comment.

The paper presents a framework to improve traceability across complex and distributed manufacturing ecosystems. It enables structured recording, linking, and querying of traceability data across trusted repositories. This research is intended to explore approaches that may support stakeholders in verifying product provenance, meeting contractual obligations, and assessing supply chain integrity.

This framework builds on previous NIST research (NIST IR 8419) and incorporates insight and feedback from industry, standards bodies, and academia. It is designed to enhance national security, economic resilience, and supply chain risk management, particularly across manufacturing and other critical infrastructure sectors.

The public comment period for this draft is open through September 1, 2025. Visit the project page for a copy of the draft and instructions for submitting comments.