US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity 7(c): Sec. 7(c) Carry the US Cyber Trust Mark on consumer IoT products sold to Government

Within 1 year the agency members of the FAR Council take steps to amend the FAR so that agencies, by 4 January 2027, require vendors to the Federal Government of consumer internet-of-things products (as defined in 47 CFR 8.203(b); FDA-regulated medical devices and NHTSA-regulated vehicles and equipment are outside the order's definition) to carry United States Cyber Trust Mark labeling for those products.

What else in your programme already covers this

This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-GV.SC-05 Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties

NIST SP 800-53 Rev 5 · 1 control

NIST800-SA-4 SA-4 Acquisition Process

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity controls