Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8536

Supply Chain Traceability: Manufacturing Meta-Framework

Date Published: September 2026

Author(s)

Michael Pease (NIST), Evan Wallace (NIST), Harvey Reed (MITRE), Vivian Martin (MITRE), Steve Granata (MITRE)

Abstract

Keywords

cryptographic linkage; integrity; interoperability; meta-framework; pedigree; provenance; selective disclosure; supply chain risk management; supply chain traceability; traceability chain; verifiable traceability
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.8536
Download URL

Supplemental Material:
Project homepage
Webinar | overview of the meta-framework

Document History:
09/27/24: IR 8536 (Draft)
07/31/25: IR 8536 (Draft)
09/09/26: IR 8536 (Final)

Topics

Security and Privacy

cybersecurity supply chain risk management

Applications

small & medium business

Laws and Regulations

E-Government Act