This IATAC State of the Art Report provides a comprehensive examination of the current state-of-the-art in addressing Supply Chain Risk Management (SCRM) as it pertains to Information and Communications Technology (ICT). It provides an overview of how supply chain and SCRM are understood in government, industry, and academia. It discusses how ICT SCRM emerged as a major concern in the U.S. Department of Defense, intelligence community, and civilian government, and describes numerous threats to the ICT supply chain, and from that supply chain to hardware and software products in it. It discusses current and emerging countermeasure approaches being applied by each of these communities to address supply chain security threats, and mitigations to vulnerabilities of those threats, and provides a comprehensive overview of significant initiatives (in the U.S. and abroad) by all communities that address aspects of the SCRM challenge. It further describes ongoing research meant to further the ability to limit or prevent supply chain security risks.