Call us now:
For defense contractors outside of the U.S this is an important read. The DoD’s supply chain risk management framework, created to strengthen the resilience of the U.S defense supply chain.
The report provides a useful update on the DoDs efforts to develop SCRM based upon 12 risk categories, identified in Appendix C. One should play close attention to the risk sub-categories. While there are no real surprises some do jump out, such as SEC enforcement actions, legal and reputational risks, theft of trade secrets and the broad range of technology and cybersecurity risks and transposed into a risk assessment program.
One wonders how the risk taxonomy will be used to assess defense contractor and subcontractor risk. With developments in international cyber regulations, enforcement actions and the theft of DoD IP? It looks very much like a taxonymy that could support FISMA and DoDi 5000.90, and could be used to identify and report risk management compliance of DoD Suppliers and its supply chain.
Ted Dziekanowski
#cybersecurity #cscrm #cyberriskmanagement #scrm #defenseindustry
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7071573699555938304