The National Telecommunications and Information Administration (NTIA) has announced the establishment of the Communications Supply Chain Risk Information Partnership (C-SCRIP), in accordance with Section 8 of the Secure and Trusted Communications Networks Act. The C-SCRIP will facilitate government sharing of supply chain security risk information with trusted providers and vendors of advanced communications services. NTIA stated it will implement the program through a phased-approach in collaboration with other government partners.
In Phase 1, NTIA will coordinate closely with its federal partners to use existing procedures to process security clearances and declassify intelligence. In Phase 2, NTIA will operationalize the program, informed by the upcoming public comments, and establish partnership guidelines. Phase 3 will involve NTIA refining its methods for sharing information with trusted providers and vendors. The final phase, Phase 4, will involve NTIA’s evaluation of the initial period of the program. NTIA has sought public comment on the implementation of this program and those comments are due July 28, 2020.
