Tom Alrich

Tom Alrich is a well-known consultant and blogger about supply chain cyber risk management and the NERC CIP-013 supply chain cybersecurity standard for the electric power industry. Alrich has consulted on cybersecurity and CIP compliance since 2008, working previously for Honeywell and Deloitte. Alrich is an active participant in the Software Transparency Initiative of the National Technology and Information Administration of the US Department of Commerce, including the ongoing Software Bill of Materials Proof of Concept for the energy industry. Alrich’s recently published book Supply Chain Cybersecurity for Critical Infrastructure is available on Amazon. He lives in Evanston, Illinois, and has an economics degree from the University of Chicago.