Supply chain security remains a critical challenge for organizations operating in the defense industrial base and other regulated sectors. Cyber threats, foreign influence, counterfeit components, and weak cybersecurity practices at any tier can compromise sensitive information and mission systems. Effective management of these risks requires both rigorous assessment of suppliers and the disciplined contractual transfer of requirements, commonly known as flow-down. NIST Speci