Draft Cybersecurity Legislation Would Impose Substantial New Obligations on Vendors Selling Interconnected Devices to the US Government

Proposed legislation seeking to strengthen the cybersecurity of agency-purchased internet-connected devices legislation would not directly impose any cybersecurity obligations on any company, but given the range of entities that supply computing/network gear to the government, wide swaths of the technology industry would be required to conduct detailed cybersecurity reviews of their products, on pain of losing the government’s business.