Cyber-100

The briefing should include each of the following items:

 identification of the the software assurance needs and expectations of the organization

 description of the key attributes of the current software development life cycle (SDLC)

 identification of any known supply chain risks

 identification of vulnerabilities in the existing software used

 identification of software options that could meet the organization's needs

 evaluation of software options and recommendation(s) for your organization, with each supported by a rationale

 evaluation of supply chain options and recommendation(s) for your organization, with each supported by a rationale

 explanation of the costs involved in your recommendations

_ recommendations for contract language that would be used to ensure that supply chain, system, network, and operational security were met