CISA Renews ICT Supply Chain Risk Task Force for Two Years

The Cybersecurity and Infrastructure Security Agency has extended the Information and Communications Technology Supply Chain Risk Management Task Force’s operations for two years.

With the renewal, the task force is expected to continue developing risk-mitigating products using artificial intelligence to address threats posed to ICT supply chain risk management processes.

Composed of representatives from the public and private sectors, the task force oversees the identification of challenges and the development of solutions to mitigate risks affecting the global ICT supply chain, CISA .gov reported.

Robert Mayer, senior vice president of cybersecurity and innovation at US Telecom, said with the growing supply chain attacks, the task force has provided significant support to the public and private sectors in mitigating supply chain risks.

CISA has been tackling various supply chain threats targeting a wide range of sectors. In October 2023, it released a document providing small and medium-sized businesses with eight steps to developing a resilience-centered supply chain management plan.

Besides CISA, the National Security Agency is also working to improve supply chain risk management. It released a cybersecurity information sheet in December 2023 to help network owners and operators protect the cybersecurity supply chain through software bills of materials.