The deadline for the final draft by the Federal Acquisition Regulations (FAR) Council on a ruling to consolidate cybersecurity supply chain risk management requirements is approaching soon. The final ruling is expected to further permeate cybersecurity regulations across Federal procurement circles. […]

In light of recent supply chain intrusions, the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Agency (CISA) and National Institute for Standards and Technology (NIST) have released new guidance on defending supply chain software, using the NIST framework to identify and mitigate risks. […]