State’s director of cybersecurity supply chain risk management says staying on top of acquisition requirements is key because of vulnerabilities associated with procurement.

GSA's guidance directs agencies and vendors to use "Best-in-Class" acquisition vehicles that offer secure 5G within their scope, like GSA's own $50 billion Enterprise Infrastructure Solutions (EIS)…

Requirements will emphasize Cloud Smart objectives and cybersecurity supply chain risk management while providing agencies an open source experience.

The DOJ’s Office of Inspector General carried out an audit of cyber-supply chain risk management compliance across the department.

During the 2020 SolarWinds hack, bad actors were able to access thousands of networks inside and outside government.

The pandemic revealed an overreliance on software developers with opaque supply chains and a high risk of "cascading effects" should their products be compromised.

A sample of vendors will soon receive a questionnaire from the agency.