CISA C-SCRM (Cyber Supply Chain Risk Management)

How C-SCRM could fill the gaps on supply chain security
Software supply chain security is finally getting the attention it deserves with the recent announcement of a new supply chain risk management office in the Cybersecurity and Infrastructure Security Agency (CISA). The ...

Less talk, more action: High hopes for CISA’s C-SCRM software supply chain security office
The US Cybersecurity and Infrastructure Security Agency (CISA) is making moves in 2023 to put all of its recent policy and guidance work around software supply chain security into action. Earlier this ...