Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Supply Chain Risk Management C-SCRM

Federal C-SCRM Forum Participation and Email Listserv Information

 

Participating in Federal C-SCRM Forum

Participation in the Forum, including events and online exchanges, is open to:

  • federal C-SCRM program managers
  • federal personnel who have a dedicated and recurring responsibility for performing C-SCRM functions
  • federal contractors who provide direct C-SCRM support (upon request by their federal sponsor and approval by the Forum co-hosts).

 

The Forum may establish working groups or study groups and welcomes all suggestions to the co-hosts.

NIST is hosting the Forum as part of its mandate under the SECURE Technology Act and the Federal Information Security Modernization Act (FISMA). Jon Boyens and his team at NIST serve as co-hosts; administrative and logistical support is also provided by NIST.


Upcoming Federal C-SCRM Forum Meetings

The following personnel are welcome to attend Forum meetings: 

  1. Staff supporting information security programs at U.S. federal, state, and local government levels  
  2. Contractors who support U.S. federal, state, and local government employees with C-SCRM work and have a .gov or .mil e-mail address*

 

*Contractors supporting government C-SCRM work without a .gov or .mil email address can have their  sponsor email [email protected] asking that the contractor attend the Forum meeting.

Contractors cannot sponsor other contractors to attend Forum events or join the email listserv.  

 

Information on upcoming Forum meetings, including registration, is available on the CSRC Events Page.


Joining the Federal C-SCRM Forum Email Listserv

Participants in the Forum listserv must:

  1. Be a U.S. federal, state, or local government employees who participate in their organization’s information security program and have a .gov or .mil  e-mail address

OR 

  1. Be a designated support contractor with a .gov or .mil e-mail address

 

Requests from personal email addresses will not be approved.

 

  1. To join the Forum Email Listserv, subscribe at: https://list.nist.gov/federal_CSCRM. 
  2. To get a Google account affiliated with your .gov or .mil email, please see: https://accounts.google.com/SignUpWithoutGmail
  3. If your organization's firewall does not allow you to join via the above methods, email: [email protected]. A moderator will approve your membership to the Forum. 

When participating in the Federal C-SCRM Forum Email list users:

  1. Should only use the listserv to share information and ask questions about cybersecurity and privacy issues only. Be aware that all list members receive an email anytime a message is sent to [email protected].  
  2. Should not attach any files larger than 10MB. Any items larger than 10MB should be made available ‘upon request.’ 
  3. Should not send out personal responses or comments to the list (e.g., “I concur," “thank-you,” etc.). These types of replies should be sent directly to the individual who posted the original message.

 

NIST reserves the right to unsubscribe members who don't follow the above guidance for Forum e-mail list use.

 

Users can manage their own email settings – including updating email addresses, email delivery settings, and unsubscribing – via the Google Group User https://list.nist.gov/federal_CSCRM.

Created May 24, 2016, Updated September 30, 2026