Which two post-award changes does NIST say should be monitored because they alter supply chain risk exposure? Choose two.

Answer: C. Supplier operational or structural changes
D. Geopolitical or environmental changes

SP 800-161r1 keeps watch after signature for shifts inside the enterprise or its systems, in how the supplier is run or structured, in the product itself, and in geopolitical or environmental conditions.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.2 The Role of C-SCRM in the Acquisition Process