Commerce Issues Guidance on Supply Chain Risk Assessment and Cybersecurity Requirements

The Department of Commerce has published directions for contracting officers and purchase card holders to implement the guidance found in NIST Special Publication 800-161: Supply Chain Risk Management Practices for Federal Information Systems and Organizations and the supply chain requirements in the agency's own Enterprise Cybersecurity Policy, Section 4.1.17(IV) – System and Services Acquisition.