New ICT rule may create a constant demand for updated CISA risk assessments

The information and communications technology supply-chain security proposal rolled out by the Commerce Department could keep a fellow agency – CISA – busy updating its ICT risk assessment amid a potential flood of transactions between U.S. telecoms, for instance, and foreign suppliers of network components and hardware.

Commerce released the ICT proposal on Nov. 27 and industry groups and other stakeholders are weighing the pros and cons of its flexible, case-by-case approach to evaluating possibly risky transactions with Chinese...