The Federal C-SCRM Forum fosters collaboration and the exchange of cyber supply chain risk management (C-SCRM) information among federal organizations to improve the security of federal supply chains.
Through periodic meetings and informal exchanges, the Forum offers all agencies that depend upon or guide C-SCRM an opportunity to discuss issues of interest with – and to inform – many of those leading C-SCRM efforts in the federal ecosystem, including the Office of Management and Budget (OMB), the Department of Defense (DOD), the Cybersecurity and Infrastructure Security Agency (CISA), the Office of the Director of National Intelligence (ODNI), the General Services Administration (GSA), and the National Institute of Standards and Technology (NIST). The Forum is hosted by NIST.
The Forum is open to all federal employees (and direct contract support) who have a dedicated and recurring responsibility for performing one or more C-SCRM functions. Participation is highly encouraged for personnel with C-SCRM roles and responsibilities, across a broad spectrum of discipline areas, including but not limited to: acquisition, information technology management, software development, engineering, information security, legal, enterprise risk management, logistics, and mission/program officials.
Objectives:
Federal C-SCRM Forum Participation & Email ListServ Information
Security and Privacy: controls assessment, cyber supply chain risk management, information sharing, malware, risk assessment, security controls, security measurement, security programs & operations, systems security engineering, vulnerability management
Technologies: cloud & virtualization, hardware, software & firmware
Applications: communications & wireless, cybersecurity framework
Laws and Regulations: Comprehensive National Cybersecurity Initiative, Cybersecurity Enhancement Act, Cybersecurity Strategy and Implementation Plan, Cyberspace Policy Review, Executive Order 13636, Federal Acquisition Regulation, Federal Information Security Modernization Act, Homeland Security Presidential Directive 12, OMB Circular A-130