GAO: Federal Agencies Need to Take Urgent Action to Manage Supply Chain Risks

In response to a request from Congress for a review of federal agencies’ information and communications technology (ICT) supply chain risk management (SCRM) practices, the Government Accountability Office found that no federal agency had fully implemented the approach. GAO found that few of the 23 civilian Chief Financial Officers Act agencies had implemented seven selected foundational practices for managing ICT supply chain risks.