Supply Chain

3 Strategies for Securing the Supply Chain, Security’s Weakest Link 

Today, no vendor or agency is safe—and just as importantly, no single organization can address all these threats independently.

  • By Brandon Shopp

FTC warns of legal risks of failing on Log4j mitigation

The Federal Trade Commission issued a warning this week urging companies to take "reasonable steps" to mitigate known software vulnerabilities or face potential legal consequences, recalling the $700 million settlement Equifax paid for a major breach in 2017.

  • By Chris Riotta

New CMMC Training to Align with Certification Changes

Look for trainers working on the Cybersecurity Maturity Model Certification program to realign their efforts to support recent changes to the certification process in 2022.

  • By Lauren C. Williams

Cream Cheese is the Just the Smooth Tip of a Sharp Problem

With ransomware hackers varying their targets to include operational technology used by U.S. factories and manufacturers, is an OT executive order needed to help combat them?

  • By John Breeden II

Modernizing FISMA. Again.

The federal government needs to improve its information security to keep pace with the dynamic threats to federal networks and supply chains. 

  • By Devin Lynch

Why Government Suppliers Will Struggle to Meet CMMC Requirements 

  • By Matt Malarkey

FTC Investigating Major Retailers Over Supply Chain Backlog

The Federal Trade Commission requested data from nine large U.S. retailers to gauge causes of supply chain bottlenecks and rising prices.

  • By Alexandra Kelley

Working to Secure the Technology Supply Chain

From security-first design to safe device disposition, an industrywide initiative called Compute Lifecycle Assurance is making technology more secure for all users.

  • By Patrick Bohart

Don’t Blindly Trust Software Building Blocks, Report Says

Developers must use safer tools, a recent report concluded.

  • By Patience Wait

NIST Seeks Feedback on Cybersecurity Labels for Software

The effort aims to create a user-friendly label to educate consumers about their purchases.

  • By Alexandra Kelley

Tech Association Pushes Long-Term Approach to Semiconductor Shortage

The group issued several recommendations as part of a Commerce Department request for comment.

  • By Frank Konkel

Presidential Advisers Recommend Agencies Invest in Automating Software Assurance

The National Security Telecommunications Advisory Committee is about to meet with senior cybersecurity officials from the White House on the issue.

  • By Mariam Baksh

Senate Unanimously Passes Secure Equipment Act

The legislation aims to protects telecom networks from foreign threats.

  • By Patience Wait

House Passes Bill to Protect Telecom Networks from Foreign Threats

Companion legislation awaits a vote in the Senate.

  • By Frank Konkel
Featured eBooks
The State of the Federal Cloud
Read Now

Addressing the Tech Talent Gap

Read Now

Health Technology in Action

Read Now

Tech Policy Trends

Read Now

Bill Would Create Supply Chain Crisis Office Within Commerce Department  

The bill also authorizes tens of billions in grants to support domestic manufacturing.

  • By Frank Konkel

OMB's Made in America Website Showcases What Agencies Aren’t Buying Here

The site showcases all waivers reviewed by the Made in America Office, allowing U.S. businesses to identify opportunities that might otherwise go to foreign competitors.

  • By Frank Konkel

CISA Warns of Vulnerabilities in Banned Chinese Surveillance Tech

The Federal Communications Commission is set to vote on tightening its national security reviews of foreign suppliers.

  • By Mariam Baksh

How AI and Data Can Increase Resilience in the New Era of the Pandemic 

While we can’t stop crises from happening, we can find ways to use data to anticipate impact and help with recovery.

  • By Suzette Kent and Mark Herrington

Agencies Seek Comments on Supply Chain Security of Critical Software

The Commerce and Homeland Security departments want details about the information and communications technology industry’s cybersecurity practices and gaps in manufacturing.

  • By Mariam Baksh

Report: Hackers Shift from Malware to Credential Hijacking

Cybersecurity firm CrowdStrike tracked record levels of cyber intrusion activity over the past year.

  • By Mariam Baksh

Combatting Defense Supply Chain and Critical Infrastructure Vulnerability with AI

Effectively mapping supply chains is a critical national security priority.

  • By McDaniel Wicker