Executive Order 14028 ‘Improving the Nations Cybersecurity’ was signed in May 2021 and OMB Memorandum M-22-18 ‘Enhancing the Security of the

← Back to Blog

Executive Order 14028 ‘Improving the Nations Cybersecurity’ was signed in May 2021 and OMB Memorandum M-22-18 ‘Enhancing the Security of the Software Supply Chain through Secure Software Development Practices – Sept 2022) set out requirements for Federal Agencies to comply with the NIST Guidance when using third-party software on the agency’s information systems or otherwise affecting the agency’s information.

As part of Enhancing Software Supply Chain Security, the GSA will begin collecting ‘letters of attestation’ from software vendors its works with, confirming that they implement secure software development processes.

One should not underestimate this process. The attestation process places a burden of proof on the providers of ICT products and services in attesting their compliance of secure software development and supply chain security.

Section 4 of the EO is extensive in its interpretation of compliance and attestation. Attestation that could be used to place oversight and assurance on product and services security.

Ted Dziekanowski

#gsa #cybersecurity #sdlc #criticalsoftware #cyberriskmanagement #theaugustagroup

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7028266785082601472