Introduction. This is the second in a series of McConnell International articles on the Comprehensive National Cyber Security Initiative (CNCI).  The first of these provided an overview of the program to include an enumeration of the twelve component programs that comprise the initial phase of the effort.  This article will focus on one of these projects– the IT supply chain risk management program that is being developed to address this issue.  Private sector entities that sell information technology (IT) products to federal agencies should monitor this program closely as it may impact the future procurement process for hardware and software components purchased by federal agencies.

It’s still uncertain when Congress will finish the work on the remaining FY 2009 Appropriations Bills which are needed to fund much of the Federal Government beyond March 6, when the current Continuing Resolution expires.  Only three FY 2009 Appropriations Bills were completed and signed into law in 2008 — Defense, Military Construction-VA and Homeland Security.  Before Congress adjourned for the year, it passed a stop-gap Continuing Resolution to fund the rest of the Federal agencies in the nine remaining Appropriations Bills.  The CR expires March 6.