Building a More Resilient ICT Supply Chain: Lessons Learned During the COVID-19 Pandemic [open pdf - 1MB]
From the Executive Summary: "The impacts of the COVID-19 [coronavirus disease 2019] pandemic on the Information Technology and Communication (ICT) sector's supply chains are still unfolding. To understand how IT [information technology] companies have been impacted, and to identify lessons learned about supply chain vulnerabilities and the potential ways to address them going forward, the Information and Communication Technology (ICT) Supply Chain Risk Management (SCRM) Task Force, a partnership between the IT and Communications Sector Coordinating Councils and the Cybersecurity & Infrastructure Security Agency (CISA) formed a study group (collectively, 'the Study Group'). The goal of the Study Group was to uncover the impacts of COVID-19 on the ICT supply chains and make practical recommendations that can support policy and operational decisions to strengthen and build additional resilience into ICT supply chains in the future. These recommendations can support policy and operational decisions intended to strengthen supply chains going forward. The study also provides a high-level visual mapping of how goods and services flow through the generalized ICT supply chain, from the raw materials stage through to sale to the consumer."
U.S. Cybersecurity and Infrastructure Security Agency: https://www.cisa.gov/