
The Defense Department’s current activities for protecting weapons systems from cyber security vulnerabilities either in the system design or sustainment phases are “insufficient” as are its processes for keeping track of “obsolescence and vulnerabilities in its inventory of microelectronic parts,” according to a Pentagon report.Pentagon programs that go through milestone decision authorities are required to address supply chain threats—including cyber vulnerabilities—in their Program Protection Plans (PPP), although these plans “do not carry over robustly to the sustainment phase,” says the…