Cyber Supply Chain Risk Management

Amendment 1 (9/11/2018): DHS will conduct a Public Meeting to provide further information and answer questions about Sources Sought Notice Number: RNCC-18-60068 "Cyber Supply Chain Risk Management." Date: 27 September 2018 (the registration form indicates that the meeting options are for September 26 or 27 but the RFI discussion will only be held on September 27) Time: 3:30 - 5:00 pm EDT Location: The MITRE Corporation 7525 Colshire Drive McLean, VA 22102 Registration: All attendees must register at https://www.mitre.org/software-and-supply-chain-assurance-forum-meetings-0 to gain entrance to the MITRE facility. Registration will be cut-off at 250 individuals due to room size limitation. Agenda: - 3:30 - 4:00 Description of information sought by DHS and how the Department intends to use it (Emile Monette, DHS) - 4:00 - close Question and answer period (All) Notes on RFI Meeting and Responses: 1. Questions and answers from the public meeting will be recorded and made available to the public. The RFI Public Meeting is being conducted after the close of the software and supply chain assurance forum meeting and is not part of the software and supply chain assurance forum. 2. DHS may use information obtained through the RFI on a non-attributional basis in future public proceedings. RFI responses will be shared and reviewed by other government agencies, such as ODNI, DoD, GSA, DOE, NIST, Treasury, and a few DHS entities such as MGMT - OCIO/OCRSO/OCPO (Policy), CBP). 3. The due date for RFI Responses is extended to October 19, 2018 at 5:00 pm Eastern Time. Amendment 2 (9/26/2018): The purpose of this amendment is to delete the statement "Respondents shall not include any proprietary information in written submissions" from number 2 in Amendment 1. Proprietary information included, as stated in Section 4.4 of the RFI, must be unclassified and appropriately marked. Amendment 3 (10/11/2018): The purpose of this amendment is to upload the RFI slides and the Q&As transcript from the meeting held on September 27, 2018.