Supply Chain Risk Management (SCRM) and cybersecurity management are “Front and Center” for the US Federal Government.

← Back to Blog

Supply Chain Risk Management (SCRM) and cybersecurity management are ¢â‚¬Å“Front and Center¢â‚¬Â for the US Federal Government.‚ The DoD has been actively working to address deficiencies in the cybersecurity of its Defense Industry Base (DIB) using Defence Federal Acquisition Regulation Supplement (DFARS) and applying the Risk Management Framework (RMF). If you work for within DoD procurement or the Defence Industry Base (DIB) the enclosed DoDi 5000.90 appreciation webinar is worth watching.
‚ 
On the 31st of December 2020, the DoD released a necessary instruction DoDI 5000.90 ¢â‚¬Å“Cybersecurity for Acquisition Decision Authorities and Program Managers,¢â‚¬Â establishing policy, prescribing procedures, and management of cybersecurity risk by program Decision Authorities (DA) and Program Managers (PM) in the DoD acquisition process.‚ For those organizations who contract
with the DoD, this is a critical instruction. It sets out the foundations for cybersecurity risk-based decision making within the Defence Acquisition System (DAS), utilizing the RMF, which includes an SCRM policy requirement for program managers.‚ It will significantly affect the relationship between DoD, DIB contractors, and subcontractors.
‚ 
#SupplyChainRiskManagement #DefenseIndustrialBase #DefenseProcurement #CyberRiskManagement #SupplyChainSecurity #DefenseIndustry #FederalAcquisition #FISMA #cybersecurity #riskmanagement #compliance #riskmanagementframework #SCRM

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6803562658424479744