This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
The German SupplyChain Act, or Lieferkettengesetz, is a new piece of legislation that came into effect January 2023 with an extended remit from January 1, 2024. In Germany, this figure amounts to approximately 3,000 companies and requires them to conduct due diligence to identify and address potential risks in their supplychain.
The Covid-19 pandemic has exposed the fact that many supplychains remain inadequately prepared for a crisis. Supplychainmanagement and procurement sit poised on the frontlines of managing global supplyrisks for their brands. Understanding Supplier RiskManagement.
The subject of the hearing was “Safeguarding the Federal Software SupplyChain.” Thank you for the opportunity to appear before you to address the federal software supplychain. As such, they are well-aware of the challenges involved in addressing vulnerabilities in the federal software supplychain.
The total costs, in terms of human lives, disrupted supplychains, ruined businesses and GDP impact, are still just projections in the array of charts presented daily by statisticians and data modelers. There are, however, already some clear lessons to be learned by Procurement and SupplyChain leaders.
Former federal executives and industry experts said it may be time to rethink the IT value added reseller (ITVAR) approach as the FBI and DCIS raid shined a brighter light on supplychainrisks that most vendors and agencies generally glossed over until now. I think the government and industry are asking that question now.
GSA-collected fees would have accounted for $30 million of the total $33 million in fund credits.” “‘Best value’ also reflects the current realities of how ordering activities use the GSA [schedules] program per its ordering procedures in the FAR.1 Koses said CICA change would help contracting officers as well as companies alike.
New products and capabilities are coming to market like AI and machine learning, and we also have new risks that are emerging. So supplychainriskmanagement and elimination becomes a very important discipline. We also have global events that are causing disruptions to the supplychain.
He oversees riskmanagement and cybersecurity accountability for information systems, weapon systems and operational technology supporting military cyberspace operations. His portfolio includes policy and governance of the defense industrial base, cyber supplychainriskmanagement, compliance and cybersecurity capabilities.
digitization Procurement processes from sourcing to accounts payable is a key strategy. Cash management has quickly risen up the (increasingly long) totem pole of Procurement priorities. The same logic supports effective supplier riskmanagement. Digitizing the P2P Cycle is good for productivity.
Implementing an HHS-wide strategy to support greater enforcement and accountability. Prioritize as a key contract consideration the handling of data, including procedures for data management, accountability, and access. James Peake , M.D., James Peake , M.D.,
He had taken on a few leadership roles in Flex such as Procurement Compliance Director, led the Global Sourcing team, and is currently member of Flex SupplyChain Council and SupplyChainRiskManagement.
Harwood, and Ashley Powers; Miller & Chevalier Chartered The Office of Management and Budget (OMB) released a new memorandum at the beginning of October, “Advancing the Responsible Acquisition of Artificial Intelligence in Government” ( M-24-18 ) (the Memo), intended to help “agencies harness the power of AI.”
Our Government Contractor Accounting course provides valuable insights into the financial aspects of subcontractor evaluation. By understanding the financial health of your potential subcontractors, you can make informed decisions and mitigate risks associated with their performance.
Non-compliance with DFARS can result in serious ramifications for defense contractors, including contract issues, legal action, financial penalties, and reputational damage, emphasizing the importance of leveraging expert guidance and ensuring compliance across the supplychain.
Qualifying checks establish an understanding of the supplier’s business continuity planning and evaluates things like riskmanagement policy, financial viability, quality controls, cloud security and performance tracking across your supplychain. insurance, liabilities) and reputational risks (e.g.,
At the same time, organizations have never been more exposed to risk from their supplychains, from supply continuity, quality, or ESG violations. Governments, employees, and customers hold businesses accountable for scope 3 emissions, forced labor, and sanctions violations. Take carbon reductions for example.
For most procurement (and supplychain) professionals, the topic of Scope 1, 2, and 3 emissions should be coming at you from every direction. This will ensure sourcing and purchasing decisions take emissions into account. Why should Procurement own Scope 3 Emissions? The answer is simple- suppliers and spend.
For most procurement (and supplychain) professionals, the topic of Scope 1, 2, and 3 emissions should be coming at you from every direction. This will ensure sourcing and purchasing decisions take emissions into account. Why should Procurement own Scope 3 Emissions? The answer is simple- suppliers and spend.
To view this webinar: How to Fight Threats to the Software SupplyChain. As DCISO, Nate assists in the development, implementation, and oversight of comprehensive information security strategies, riskmanagement, agency incident response plans, and programs. Immigration and Customs Enforcement.
Arnaud (Ivalua) – Buyers’ objectives have expanded over the years – initially responsible for savings and cost avoidance, Byers were then tasked with handling riskmanagement, and also expected to contribute to the organization’s sustainability initiatives. .
Each card has a predetermined budget, card number, and CVV and are used for business expenses where a supplier relationship or account doesn’t need to be established. Due to the risk of misuse or fraud p-cards are limited to individuals and this restricts the program usage within a company.
Relatedly, the AI WP relies on those mechanisms to avoid addressing issues of accountability across AI life cycle, indicating that ‘[t] ools for trustworthy AI like assurance techniques and technical standards can support supplychainriskmanagement. This conflates two issues.
During the training, Jason, Liam, and Alex will cover the following topics and more: Pricing – Transactional Data Reporting (TDR)/Commercial Sales Practices (CSP); Domestic Preferences; SupplyChain; Enforcement/Mandatory Disclosure/Ethics; Sustainability Requirements/Policy; and Bid Protests Update. James Peake , M.D.,
Riskmanagement, cost reduction and digital transformation — these are the three top priorities for procurement organisations in the Middle East today, according to a global survey conducted by Ivalua’s global partner PwC. Next, organizations will adopt process intelligence to optimize procure-to-pay and accounts payable processes.
This month, CISA extended the charter through 2026 for the Information and Communications Technology SupplyChainRiskManagement Task Force. The ICT Task Force has developed guidance around hardware bills of material and other supplychain issues.
Additionally, on March 28, 2024 the Office of Management and Budget released the final guidance on Memorandum M-24-10, Advancing Governance, Innovation, and RiskManagement for Agency Use of AI as we address here. The House Committee on Oversight and Accountability has considered this bill and voted on a markup.
Tom’s illustrious career in the private sector also includes working with the Washington Management Group as Vice President for Law and Policy and with AT&T Government Solutions, where, as Senior Counsel, he supported civilian and defense business teams and served as a subject matter expert on government procurement policy issues.
The RFI included 13 questions on infrastructure/supplychain resilience, workforce, innovation, acquisition, policy, and regulatory environment. In July 2023, NITAAC announced plans to take corrective actions and reevaluate proposals after the Government Accountability Office upheld 98 protests. 10] [1] 13 CFR 125.8(b).
The document, officially titled “Incident Response Recommendations and Considerations for Cybersecurity RiskManagement: A CSF 2.0 The new draft guidance also shifts the focus away from “detecting, analyzing, prioritizing, and handling incidents” to incorporating incident response into overall cybersecurity riskmanagement activities.
We remain committed to this mission at the upcoming Spring Training Conference, ensuring that attendees leave with comprehensive updates on acquisition policies, programs, and initiatives in subjects like artificial intelligence (AI), cybersecurity, the medical supplychain, and much more. We look forward to seeing you in May!
Ascend will include recently updated standards on supplychainriskmanagement (SCRM) and cyber SCRM (C-SCRM). Data ownership and portability: Ascend establishes the requirement that agencies own their accounts and data, and cloud service providers (CSPs) have to make the data portable in case the agency wants to move it.
The priority areas are: Asset Management Vulnerability Management Defensible Architecture Cyber SupplyChainRiskManagement (C-SCRM) Incident Detection & Response Each priority area includes further alignment goals to address these variations.
But few remember the stress the 2011 event placed on global supplychains. . Agriculture, financial services, biotech/pharmaceuticals and telecommunications also accounted for a large portion of Japan’s GDP. . The interdependence of the global supplychain guaranteed the effects would extend far beyond the Japanese economy. .
Contracting officers should consider cybersecurity, supplychainriskmanagement, data governance and other standards and guidelines just as they would with other IT procurements. In that way, the fastest acquisition may be no acquisition, or as simple as adding more “credits” to an existing cloud platform account.
Data plays a pivotal role in supply, demand, and real-time monitoring of the drug supplychain by medicine authorities. Data mesh to the rescue Data mesh is an architectural framework that enables organizations to redefine how they manage and utilize their data assets. In 2023, 55 new drugs were approved by U.S.
GSA Requesting Feedback on Draft SupplyChainRiskManagement Questionnaire The General Services Administration’s (GSA) Office of Information Technology Category has developed a supplier assurance questionnaire to gather information regarding cybersecurity supplychainriskmanagement (C-SCRM).
Seeking Member Feedback on GSA C-SCRM Questionnaire GSA’s Federal Acquisition Service is developing a voluntary Cyber SupplyChainRiskManagement (C-SCRM) Assurance Questionnaire for information and communications technology vendors.
. ** Strengthen Software SupplyChain Security WHAT’S AT STAKE Whether developed in-house or procured from the commercial market, every major application includes countless open source and commercial software components.
Contractors will have obligations with respect to records management and agency access to Government data, Government-related data, and contractor personnel involved in contract performance (this includes access by CISA). There is a separate open FAR case (No.
Contractors will have obligations with respect to records management and agency access to Government data, Government-related data, and contractor personnel involved in contract performance (this includes access by CISA). There is a separate open FAR case (No.
GAO Dismisses Protests for GSA’s Polaris Vehicle Washington Technology reports that after the Government Accountability Office (GAO) dismissed two protests on February 5, the General Services Administration (GSA) can move forward with making awards for its Polaris contract vehicle. Final awards would then be issued in January 2025.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content