A further example whereby accountability and responsibility for cybersecurity is being ‘lifted up’ to senior executives.

← Back to Blog

A further example whereby accountability and responsibility for cybersecurity is being ‘lifted up’ to senior executives. As U.S Federal Government, in the form of CISA, continues to move ahead in placing greater accountability and responsibility on the boards of software vendors, suppling U.S Federal Agencies.

Releasing its latest draft of ‘Secure Software Development Attestation’. If finalized requires the CEO, COO or a C3PAO to attest compliance to the covered organizations Secure SDLC (Section III). A requirement that has significant implications for software vendors globally across OT and IT.

CISA is following up on Executive Order 14028 and the Office of Management and Budget’s (OMB) M-22-18, Enhancing the Security of the Software Supply Chain through Secure Software Development Practices, and OMB M-23-16, and the required development of a self-attestation form for software producers serving the federal government to confirm implementation of specific security practices.

Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Bob Dix

#cybersecurity #cyberriskmanagement #cisa #sdlc

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7132647963222257665