ANK-369/ETAF_SCVR

Ethiopian Air Force Supply Chain Vendor Risk Scoring Engine # 🇪🇹 ETAF Supply Chain Vendor Risk Scoring Engine (ETAF-SCVR) **Project:** ETAF-CYBER-005 **Author:** ANK **Institution:** Ethiopian Air Force (ETAF) **Version:** 1.0.0-PROD **Classification:** ETAF INTERNAL USE **Date:** 2026-08-11 --- ## Table of Contents 1. Why ETAF Needs This System 2. Deployment Scenarios 3. Hardware & Software Requirements 4. Production Deployment 5. Risk Scoring Pipeline 6. Eight-Dimensional Risk Model 7. Alert Rules & Thresholds 8. Security Architecture 9. Research Framework 10. 3-Year Roadmap 11. Production Readiness Assessment 12. Trust & Security 13. Project Structure 14. Quick Start 15. CLI Reference 16. Exit Codes 17. Security Features --- ## 1. Why ETAF Needs This System The Ethiopian Air Force operates one of the most complex procurement ecosystems in East Africa. ETAF acquires **software** (radar processors, flight planning systems, C2 middleware), **hardware** (routers, servers, radio sets, avionics), and **services** (maintenance contracts, training, cloud infrastructure) from hundreds of domestic and international vendors. Every vendor relationship is a **potential attack surface** — and traditional procurement security focuses on price, delivery, and specification compliance, **not** on the security posture of the vendor itself. ETAF-SCVR closes this critical gap by introducing **structured, repeatable, evidence-based vendor risk assessment** that evaluates every supplier across eight security dimensions before contract award, during performance, and at renewal. ### The Supply Chain Threat Landscape Facing ETAF | Threat Vector | Real-World Precedent | ETAF-Specific Impact | |---------------|---------------------|----------------------| | **Backdoored hardware** | 2020: Chinese routers found with hidden firmware backdoors in African telecom networks | Adversary gains persistent access to ETAF air defense radar backbone; exfiltrates flight schedules and IFF codes | | **Trojanized software** | 2020: SolarWinds Orion compro …