Question

what are the Federal and State legislation for risk managementthat you will observe?

Answer 1

Ans)

The U.S. Government is renewing its focus on mitigating technological risks by regulating the supply chain for various goods and services. To achieve these goals, Congress and agencies have introduced, and in some cases enacted, legislation and regulations that direct agencies to identify, assess, and mitigate supply chain risks generally as well as prohibit agencies from purchasing goods and services from specific organizations. The primary aim of these efforts is to make U.S. information technology (“IT”) infrastructure less vulnerable to attacks from state and non-state actors. The most notable legislation and regulations thus far in 2018 are summarized below:

• Prohibition on Procuring Chinese Telecommunications Services or Equipment:

- One of the most prominent legislative efforts addressing the U.S. Government’s supply chain would prohibit agencies from purchasing certain Chinese telecommunications equipment or services.  

• Federal Acquisition Supply Chain Security Act of 2018:

- On June 19, 2018, Sens. Claire McCaskill (D-MO) and James Lankford (R-OK) introduced the Federal Acquisition Supply Chain Security Act of 2018 (“FASCSA”) to manage supply chain risk.

• Enhance Cybersecurity for Small Manufacturers Act of 2018 (S. 2666)

- The Enhance Cybersecurity for Small Manufacturers Act would require NIST to work with DoD and the Hollings Manufacturing Extension Partnership to help “small manufacturers in the defense industrial supply chain” understand and address cybersecurity threats.