Securing the Information and Communications Technology Global Supply Chain from Exploitation: Developing a Strategy for Education, Training, and Awareness

Exploitation of the global Information and Communications Technology (ICT) supply chain is a growing security concern for government and industry. This paper frames the key elements of global ICT supply chain security and its importance to government as well as private sector companies, and the development of a comprehensive strategy for education, training, and awareness of the U.S. Department of Defense workforce military, civilians, and contractors about this crucial aspect of cybersecurity. The foundational elements of the strategy are collaboration among stakeholders to clarify confusing terminology; articulation of core messages regarding decision making about risk that will frame the curriculum; and establishment of a community of interest among defense and government organizations, and partnerships with industry, higher education institutions, and domestic and international professional and standards organizations.