ANSI to Hold July 27–29 Workshop on Global Supply Chain Security for Microelectronics Standardization

Save the Date: ANSI to Hold July 27–29 Workshop on Global Supply Chain Security for Microelectronics Standardization

The American National Standards Institute (ANSI) has announced plans to convene on behalf of the U.S. Department of Defense (DoD) a workshop on global supply chain security for microelectronics standardization. The workshop will be held July 27–29 at the headquarters of Booz Allen Hamilton, 8283 Greensboro Dr., McLean, VA. While in-person participation is strongly encouraged, remote participation will be offered. The workshop agenda and registration information will be announced in due course.

The workshop will assist DoD in gathering and assessing information regarding relevant standardization activities to fulfill its mandate under Section 224 of the FY20 National Defense Authorization Act (NDAA) requiring that DoD microelectronics products and services meet trusted supply chain and operational security standards.

Stakeholders identified for targeted outreach include DoD, the Departments of Homeland Security, State, and Commerce—especially the National Institute of Standards & Technology (NIST)—along with suppliers of microelectronics products and services, representatives of major industry sectors that rely on a trusted supply chain and the operational security of microelectronics products and services, and the insurance industry. Ultimately, DoD seeks to foster an ecosystem where trusted supply chain and operational security standards for procuring microelectronics products and services are widely adopted by U.S. government agencies, allies, partners, and commercial industry.

Commerce Proposes New Software Supply Chain Safety Criteria

Commerce Proposes New Software Supply Chain Safety Criteria – MeriTalk

The Department of Commerce is proposing new safety criteria for connected software to help better secure information and communications technology and services (ICTS) supply chains, including potential third-party audits of connected software and ICTS transactions, according to a proposed rule posted to the Federal Register Nov. 26.

The Department of Commerce is seeking feedback on the rule in its entirety but is also specifically looking for feedback on how to define what is a “reliable third-party” for the purposes of the rule. The agency also wants to know if its criteria of “third-party auditing of connected software applications” is sufficiently descriptive or whether the agency needs to get more specific.

The agency will accept public comment on the proposed rule until Dec. 30.