DHS seeks input on securing the supply chain

DHS wants input from industry on how to take a lifecycle approach to supply chain security.

Homeland Security Department officials will discuss their recent cyber supply chain risk management request for information and address industry’s questions at an event Sept. 27.

DHS’s discussion will be from 3:30 to 5 p.m. at The MITRE Corp. in McLean, VA. The event is limited to 250 attendees who must register beforehand.

The event registration website notes the event as Sept. 26 and 27. However, DHS officials will discuss the RFI Sept. 27 only.

Cyber supply chain risk management identifies and deals with risks related to distributed and interconnected aspects of information and communications technology (ICT) product and service supply chains. It covers the entire lifecycle of a system, as supply chain threats and vulnerabilities may compromise a product or service.

DHS wants feedback from industry about the available capabilities that address risk from threats, vulnerabilities, likelihoods, and consequences, and aggregate multiple data sets that can be analyzed and visualized related to the relationships of businesses, individuals, and supply chains overall.

DHS is interested in capabilities related to supply chain risk due diligence information and tools, products or system solutions that can deliver relevant information. Examples may include assisting market research and source selection evaluation criteria, testing and evaluations, and investigations.

DHS released a sources sought notice Aug. 17. Officials are accepting responses from industry about the RFI until Oct. 19.