Roundtable: Supply Chain Risk Management in the Federal Government

Federal government agencies rely extensively on IT products and services to carry out their operations. There is, however, cybersecurity supply chain risk in connection with acquiring, deploying and using these products and services. This is evidenced by the numerous supply chain attacks over the past decade such as the Target data breach in 2013, Solarwinds attack in 2020 and Kaseya attack in 2021. As a result, the federal government has taken several actions in an effort to address cybersecurity supply chain risk and these actions have resulted in executive orders, laws, regulations, guidance documents, etc. This roundtable discussion will provide information on the federal government actions in the last several years, resources that can help with establishing a SCRM program, available tools to conduct SCRM across the federal government, the challenges associated with conducting SCRM and the help available for agencies in meeting the mandates to implement SCRM.