Polaris supply chain risks
Prospective bidders on the Polaris IT services solicitation need to be aware of a new requirement for robust cybersecurity and Supply Chain Security Risk Management (SCRM).
The difficulty is that bidders must explain how they will maintain a high level of readiness now and in the future, PilieroMazza’s Cy Alba wrote in a blog.
GSA expects offerors to maintain cybersecurity and SCRM plans each year reflecting the latest technologies and processes. “Offerors must not only have sufficient protections today but commit to a cycle of continuous improvement,” Alba wrote. “This puts the onus on the contractor to constantly review subcontractor cybersecurity and SCRM protections.”
More Information:
PilieroMazza blog: https://bit.ly/3xHN7Ai