The Cybersecurity and Infrastructure Security Agency is developing a new resource center for federal agencies to help address compliance issues associated with a wave of recent cyber supply chain risk management — or C-SCRM — and software security mandates.
The hub will first be piloted by an initial set of agencies, though CISA plans to include a section for industry as part of a broader effort to expand information sharing across the public and private sectors, according to Shon Lyublanovits, the lead for the agency’s C-SCRM project management office.
