NEWS JOBS BLOGS EVENTS The SUPPLY SIDE PROCUREMENT PROFESSIONAL MAGAZINE
LOG IN

CIPSA CONFERENCE

CIPSA TRAINING

 

PP42 April 2012

US Govt could rate software manufacturers according to their supply chain

28 Oct 2010

Source Fierce GovernmentIT
The US  government could rate software manufacturers according to their supply chain practices when considering which applications to buy, said a Homeland Security Department official while speaking at an industry conference. "There are suppliers in that chain who are people we would not allow into our facilities, but we're just going to take their software and install it? Anybody understand that there's a problem with that?" said Joe Jarzombek, director for software assurance and global cybersecurity management within the DHS National Cyber Security Division. The intention behind the ratings isn't to create a blacklist of vendors deemed too risky for federal acquisition, but to identity supply sources that "require a little bit more due diligence and therefore risk management," Jarzombek added.

In a related conference session, former Office of Management and Budget Administrator for e-Government and Information Technology Karen Evans urged the government to be tougher with all information technology companies over their supply chain practices. The minute that the Defense Department rejects a router for cybersecurity reasons, "it will send a ripple effect through the industry, and then people will fix it," she said. "If you marked a deliverable as undeliverable, it gets everybody's attention all the way up the chain."

Read more here
 

  © 2012 CIPS Australasia About Us | Site Map | Privacy Statement | Terms & Conditions