The U.S. Government is renewing its focus on mitigating technological risks by regulating the supply chain for various goods and services. To achieve these goals, Congress and agencies have introduced, and in some cases enacted, legislation and regulations that direct agencies to identify, assess, and mitigate supply chain risks generally as well as prohibit agencies from purchasing goods and services from specific organizations. The primary aim of these efforts is to make U.S. information technology (“IT”) infrastructure less vulnerable to attacks from state and non-state actors. The most notable legislation and regulations thus far in 2018 are summarized below:
Prohibition on Procuring Chinese Telecommunications Services or Equipment
One of the most prominent legislative efforts…
