Weathering TechNationalism
Executive Summary This report provides policymakers, regulators, and corporate executives a framework for mitigating risk and addressing shared responsibility in global ICT supply chains through measures of assurance, transparency, and accountability implemented jointly by ICT buyers, operators, and vendors. It also provides supporting policy measures to achieve a balanced, risk-informed outcome and avoid the negative consequences of TechNationalism.
The Consequences of TechNationalism Information and communications technology (ICT) is strategic for a nation’s economy, security, and identity. Exploitable vulnerabilities in ICT and complex, difficult to secure supply chains are raising security concerns in the public and private sectors. National governments, particularly, are paying increased attention to the possibility that foreign governments might taint ICT through global supply chains, either by coercing a local supplier to cooperate or by gaining direct access to its operations. Several governments have warned against or restricted the use of certain foreign ICT products and services in their domestic markets—with the stated intention of protecting against such risks. This report refers to such policy actions as TechNationalism—direct or indirect measures that favor ICT products and services sold by companies headquartered domestically or in allied states against those headquartered in states seen as competitors or adversaries.
Weathering TechNationalism: A Security and Trustworthiness Framework to Manage Cyber Supply Chain Risk provides policymakers, regulators, and corporate executives a framework for mitigating risk and addressing shared responsibility in global ICT supply chains through measures of assurance, transparency, and accountability implemented jointly by ICT buyers, operators, and vendors. It also provides supporting policy measures to achieve a balanced, risk-informed outcome and avoid the negative consequences of TechNationalism. TechNationalism in the global ICT market is driven by competing national interests including national security, cybersecurity, economic competitiveness, innovation, prestige, and
4
