Department of Homeland Security identifies top threats to supply chain security in 2019 report

By Sascha Matuszak

The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency’s Information and Communications Technology (ICT) Supply Chain Risk Management Task Force released its 2019 interim report[1] in September. The task force was established to advise public and private sectors organizations on means for assessing and managing risks associated with the ICT supply chain.

Supply chain security has become a major issue for the United States government and the Trump administration, which has passed several acts and executive orders to improve security — especially cybersecurity — within the vast procurement networks that feed into the U.S. government supply chain. A webinar cited by the report estimates the U.S. government invests USD 500 billion in ICT products and services and this, coupled with multiple reports detailing the many threats to supply chains (e.g., reports from Symantec Corp.[2] and the National Counterintelligence and Security Center[3] ), demanded a serious effort to understand the threats.

The Cybersecurity and Infrastructure Security Agency’s task force was split into four working groups, each addressing a different element of the supply chain:

  • Working group 1: Information sharing – Development of a common framework for the bi-directional sharing of actionable supply chain risk information across the community.

  • Working group 2: Threat evaluation – Identification of processes and criteria to better understand and evaluate threats to ICT supplies, products, and services.

  • Working group 3: Qualified bidder Lists and Qualified Manufacturer Lists (QBL/QML) – Identification of market segments and evaluation criteria to establish Qualified Bidder and Qualified Manufacturer Lists that address considerations of vendor and product inclusion and exclusion.

  • Working group 4: Policy recommendations to incentivize purchase of ICT from original equipment manufacturers & authorized resellers – Policy recommendations principally aimed at stopping the growing problem of counterfeit ICT procurement.

This document is only available to subscribers. Please log in or purchase access.
Purchase Login
 


Would you like to read this entire article?

If you already subscribe to this publication, just log in. If not, let us send you an email with a link that will allow you to read the entire article for free. Just complete the following form.

* required field

First name field cannot be blank!
Last name field cannot be blank!
We will send you an email that will give you access to this entire article.
Email field cannot be blank!
Enter a valid email!
Company field cannot be blank!
Enter a valid company!
Title field cannot be blank!

We're committed to your privacy. The Society of Corporate Compliance and Ethics (SCCE) & Health Care Compliance Association (HCCA) uses the information you provide us to contact you about our relevant content, products, and services. For more information, check out our Privacy Policy.


About SCCE

The Society of Corporate Compliance and Ethics (SCCE) is a non-profit, member-based professional association. SCCE supports our members' work with education, news, and discussion forums. We are a community of leaders, defining and shaping the corporate compliance environment across a wide range of industries and geographic regions. In developing and maintaining effective ethics and compliance programs, our members strengthen and protect their companies.

952.933.4977

About HCCA

The Health Care Compliance Association (HCCA), is a 501(c)6 non-profit, member-based professional association. HCCA was established in 1996 and is headquartered in Minneapolis, MN. We provide training, certification, and other resources to over 10,000 members. Our members include compliance officers and staff from a wide range of organizations, including hospitals, research facilities, clinics and technology service providers.

952.988.0141

Facebook Twitter LinkedIn
Copyright © 2024 by Society of Corporate Compliance and Ethics (SCCE) & Health Care Compliance Association (HCCA). No claim to original US Government works. All rights reserved. All information provided through this site, including without limitation all information such as the “look and feel” of the site, data files, graphics, text, photographs, drawings, logos, images, sounds, music, video or audio files on this site, is owned and/or licensed by SCCE & HCCA or its suppliers and is subject to United States and international copyright, trademark and other intellectual property laws. Any third party logos and/or content provided herein is owned by such third parties and is used by permission herein. Your use of this site to is subject to our Terms Of Use and Privacy Statement.
Cookie settings