Next steps still under wraps for anxiously awaited Commerce ICT supply-chain rule

Almost a year after issuing draft regulations, the Commerce Department’s rule on information and communications technology supply-chain security remains in bureaucratic limbo, with industry sources expressing concern and frustration over the status of a proposal with broad impacts across sectors.

“This is perhaps the most consequential and least transparent government proceeding” in the cybersecurity space, commented one industry source. “It’s troubling that this is so far removed from a typical regulatory process.”

Added another industry source, “There’s been very little...