Top senators on the Senate Homeland Security Committee warned the Office of Management and Budget Oct. 9 that IT professionals in Congress and the federal judiciary may not be getting all the supply chain risk information they need to secure their computer systems and networks as they make acquisitions.<\/p>\n\n\n\n
The senators wrote to OMB Director Mick Mulvaney \u2033urging” the Federal Acquisition Security Council (FASC) to develop a strategic plan for sharing supply chain security information with Congress and the judiciary. The letter is signed by Chairman Ron Johnson, R-Wisc.; Ranking Member Gary Peters, D-Mich.; Sen. Tom Cotton, R-Ark.; and Sen. Ron Wyden, D-Ore.<\/p>\n\n\n\n
The FASC is responsible for increasing information sharing within the federal government regarding supply chain risk and creating guidelines and practices for risk management. The FASC distributes the intelligence community\u2019s supply change risk management (SCRM) threat analysis to federal civilian agencies making acquisitions decisions. But the senators said that the information from FASC is not reaching the other two branches of government and supply chain solutions that work for executive agencies don\u2019t necessarily work for the \u201cwhole of government.\u201d<\/p>\n\n\n\n
\u201cNeither Congress nor the Judiciary has the resources, expertise or mission to replicate the IC SCRM\u2019s work, meaning that the comprehensive \u2018whole of government\u2019 approach the FASC was intended to achieve will likely only benefit one branch of the federal government,\u201d the senators wrote. \u201cThis leaves Congress and the court at risk of introducing insecure [information and communications technology] that is vulnerable to the national security threats assessed by IC and the FASC.\u201d<\/p>\n\n\n\n
The senators noted several reports of adversaries targeting the court and congressional networks. Microsoft recently disclosed that several email accounts of government officials were targeted by the Iranian-backed hackers.<\/p>\n\n\n\n
\u201cThe threat is not hypothetical,\u201d they wrote. \u201cAmericans may accept the principle of separation of branches of government, but our adversaries don\u2019t abide by that principle.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
Senators want a strategic plan to assure IT professionals in Congress and the judiciary can get the information they need to make safe decisions.<\/p>\n","protected":false},"author":7,"featured_media":54233,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":38,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[104,38,106,31,110,14,33,9,6],"tags":[],"coauthors":[3242],"class_list":["post-28595","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-acquisition-update","category-congress","category-daily-brief","category-home","category-it-cloud-report","category-it-networks","category-newsletters","category-federal-oversight","category-acquisition"],"acf":{"subheadline":"","legacy_arc_id":"LLEU37VK6RHHPFS6W5M25HJTKY","arc_canonical_url":"\/civilian\/omb\/2019\/10\/11\/is-congress-in-the-dark-on-supply-chain-risk\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n