National Supply Chain Integrity Month: Improving Sharing Supply Chain Risk Information

April is National Supply Chain Integrity Month, and CISA is promoting a call to action to “Fortify The Chain”.

The Cybersecurity and Infrastructure Security Agency (CISA) ICT Supply Chain Risk Management (SCRM) Task Force is pleased to share a new resource that focuses on the issues surrounding the facilitation of sharing supply chain risk information (SCRI), among the federal government and industry. The sharing of supply chain threat information between the government and private industry is an important avenue in which to mitigate the threats to the nation’s ICT supply chain. 

This research report, Preliminary Considerations of Paths to Enable Improved Multi-Directional Supply Chain Risk Information, focuses on ways to limit certain state law causes of action that businesses may be subject to by virtue of sharing SCRI.  The report offers research by subject matter experts on legal and policy considerations to be utilized by private enterprises or government in seeking to address the issue of liability limitations. 

Furthermore, the report evaluates the barriers to multi-directional sharing of more specific SCRM information and identifies the single most impactful barrier: the absence of legal liability protection for those who share well-founded risk insight. The report details proposed additional liability protections for consideration as methods to maximize protection for private entities seeking to take part in an SCRI-sharing framework and ultimately, to improve the volume and quality of SCRI shared across and among the private and public sector.

To learn more about this most recent information sharing work, watch this video. 

If you would like to learn more about making your manufacturing facility more resilient, contact your Local Solutions Consultant today to schedule a free consultation.