One has long discussed cyber regulation in the U.S and EU and its effects.

← Back to Blog

One has long discussed cyber regulation in the U.S and EU and its effects. The enclosed is further example of the effects of cybersecurity regulation, as it relate to the supply of products that contain software to U.S federal Agencies. That effects firms that deliver software (firmware, operating systems, applications, and application services (e.g., cloud-based software), as well as products containing software.) directly to Federal Agencies or to suppliers to Federal Agencies.

Following the release of EO 140298 in May 2021 and OMB M-22-18, Federal agencies must only use software that is provided by software producers who can attest to complying with Government-specified minimum secure software development practices. OMB has reaffirmed the importance of secure software development practices, and for agencies to collect attestations from product (that contains software) and software producers as to their secure software development practices.

For Non U.S software product and code developers this is worth a read. As suppliers must attest that secure software development practices are applied to the Software Bill of Materials used in their products, that may include non-U.S developed code. Putting in place PO&Ms to close gaps in knowledge.

This is an important update and well worth a read. A further example of how cyber regulation is developing.

Ted Dziekanowski

#cybersecurity #cyberriskmanagement #sdlc #securesoftwaredevelopment

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7074285415804887040