Save the Date: Fall SSCA Forum

[McWhite, Rebecca A. (Fed)]

Greetings all,

 

The next Software and Supply Chain Assurance (SSCA) Forum will be held IN PERSON at MITRE, in McLean, VA, on September 9-10, 2025. Registration is now open.

 

Our next SSCA Forum Meeting will be held in person at the MITRE McLean, VA campus on Tuesday, September 9th and Wednesday, September 10th.  Tentative agenda topics this session include DoD’s Software Fast Track initiative, activity updates on executive orders, AI and microelectronics supply chain security, and supply chain traceability. We hope you can join us!  

 

• Dates:  September 9-10, 2025
• Location:  MITRE McLean, VA Campus 
• Registration along with past agendas and presentations can be found at the SSCA Forum homepage: https://csrc.nist.gov/projects/cyber-supply-chain-risk-management/ssca

 

The SSCA Forum is held several times a year and it is FREE and OPEN to the public, though registration is required.

 

Cyber risk has become a topic of core strategic concern for business and government leaders worldwide and is an essential component of an enterprise risk management strategy. The Software and Supply Chain Assurance Forum (SSCA) provides a venue for government, industry, and academic participants from around the world to share their knowledge and expertise regarding software and supply chain risks, effective practices and mitigation strategies, tools and technologies, and any gaps related to the people, processes, or technologies involved. The effort is co-led by the National Institute of Standards and Technology (NIST), the Department of Homeland Security (DHS), the Department of Defense (DoD), and on occasion, the General Services Administration (GSA). Participants represent a diverse group of career professionals from government, industry, and academia, including: chief information security officers, cybersecurity and supply chain specialties, system administrators, engineers, consultants, vendors, software developers, managers, analysts, and many more fields.

 

Also, for community awareness: SP 800-18, Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems, has been updated to Revision 2 and its comment period is closing TOMORROW, 30 July. For those able to quick-turn review and submit, the document is available here: https://csrc.nist.gov/pubs/sp/800/18/r2/ipd.

 

Thank you,

SSCA Team