GAO - Federal Agencies Need to Take Urgent Action to Manage Supply Chain Risks

This GAO report is dated December 20, 2020. The U.S. Government Accountability Office, found that 14 out of the 23 surveyed federal agencies hadn’t implemented any of the “foundational practices” to protect their information and communications technology supply chains, and none of the agencies had implemented all of them. Those practices had been recommended in 2015 by the National Institute of Standards and Technology, and the following year, the Office of Management and Budget required the agencies to implement the changes.