Supply Chain Security Training Act of 2021
Jun 16, 2022
Statute: 136 Stat. 1269
Became law: Jun 16, 2022
Jun 16, 2022
Statute: 136 Stat. 1269
Became law: Jun 16, 2022
Summary
Requires the government to create a training program to teach federal workers how to spot and handle security risks when buying products and services.
What problem does this solve?
The government buys many products that could be tampered with, creating security risks for the nation. This law establishes a training program to teach federal employees how to identify and manage these supply chain dangers.
What does this law do?
Creates a new training program
Directs the Administrator of General Services to develop a training program for federal officials who manage supply chain risks.
Mandates agency adoption
Requires the Director of the Office of Management and Budget to issue guidance making all executive agencies adopt and use the new training program.
Defines training content
Requires the program to teach how to find and reduce security risks when buying items, especially information and communications technology, and to include current threat information.
Requires inter-agency teamwork
Mandates that the Administrator coordinate with the Federal Acquisition Security Council, Department of Homeland Security, and consult with the Director of National Intelligence to create the training.
Who does this affect?
- Federal agency officials with supply chain duties
- Federal agencies
What is the real world impact?
•
Strengthens national security
Protects the U.S. government from foreign spies or criminals who might tamper with technology and other products. By training employees, it makes the government's supply chain harder to attack.
•
Standardizes government training
Creates a single, consistent training program for all federal agencies. This ensures everyone has the same basic knowledge for protecting the supply chain, instead of each agency making its own rules.
When does this start?
This law takes effect on June 16, 2022, and sets several deadlines for creating and implementing the new training program.
Training program development
The General Services Administration must create the supply chain security training program within 180 days of the law's enactment.
Guidance for agencies
The Office of Management and Budget must issue guidance for agencies to adopt the training within 180 days after the program is developed.
First report to Congress
The General Services Administration must submit its first report on the program's use within 180 days after the first training course is completed.