S. 2201 would direct the General Services Administration (GSA) to develop a program to train federal employees in managing the risks to federal agencies’ supply chains. GSA would coordinate the use of the program among federal agencies, detail the program’s content, and report to the Congress on implementation.
Executive Order 14028, Improving the Nation’s Cybersecurity, issued on May 12, 2021, and the Federal Acquisition Supply Chain Security Act of 2018 currently require agencies to assess and mitigate risks to their supply chains. In addition, the Federal Acquisition Institute and the Defense Acquisition University offer training and other resources for managing risk related to supply chains, and CBO expects that most federal employees who would be affected by the bill will take such training under current law. Thus, because the training required under the bill is available to federal agencies under current law, CBO expects that the provisions related to training would have no significant cost. Based on the cost of similar reports, CBO estimates that the reporting requirements would cost less than $500,000 over the 2022-2026 period.
