In October 2018, the Cybersecurity and Infrastructure Security Agency (CISA) launched the Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Task Force, a public-private partnership to provide advice and recommendations to CISA and its stakeholders on means for assessing and managing risks associated with the ICT supply chain. Today’s program will discuss the year two reports findings, recommendations, and discuss the next steps.