Secure Software Development For US Gov.pdf

M-22-18.pdf
Preview of Secure Software Development for US Gov
🔗 Source: whitehouse.gov
📊 Size: 396 KB
👤 Author: Shalanda D. Young
⬇️ Downloads: 57

Summary

The Office of Management and Budget (OMB) directs federal agencies to enhance software supply chain security by complying with the National Institute of Standards and Technology's (NIST) Secure Software Development Framework (SSDF) and Software Supply Chain Security Guidance. Key points include:

- Scope: Applies to third-party software used by federal agencies, including software developed after the memorandum's effective date and existing software with major version changes. It does not apply to agency-developed software.

- Actions: Agencies must obtain a self-attestation from software producers confirming compliance with secure software development practices outlined in the NIST Guidance. If a producer cannot fully attest, they must provide a Plan of Action & Milestones (POA&M) to mitigate risks.

- Self-Attestation Requirements: The attestation must include the software producer's name, the product(s) covered, a statement that the producer follows the NIST Guidance, and the producer's name and title.

- Timeline: Agencies are required to obtain self-attestations by the timelines identified in the NIST Guidance.

- Agency Responsibilities: CIOs, in coordination with requiring offices and CAOs, must ensure software producers have implemented and will attest to conformity with secure software development practices. Agencies awarding contracts that may be used by other agencies are responsible for implementing these requirements.

Description

Director Young directs agencies to enhance software supply chain security via secure development practices, citing persistent global threats.

Technical Information

  • File Format: PDF
  • File Size: 396 KB
  • Pages: 8
  • Language: EN
  • Author: Shalanda D. Young
  • Total Downloads: 57
  • Last Updated: 2 weeks ago

Document Overview

This PDF document about Secure Software Development for US Gov provides comprehensive information and guidance. Whether you're a beginner or advanced user, this resource offers valuable insights into Secure Software Development for US Gov.

Related Topics

If you're interested in Secure Software Development for US Gov, you might also want to explore:

Download Secure Software Development for US Gov eBooks for free and learn more about Secure Software Development for US Gov. These books contain exercises and tutorials to improve your practical skills, at all levels!

Not satisfied with this document? We have related documents to Secure Software Development for US Gov, try searching with similar keywords: "Hinder och möjliggörare för 1.5°-livsstilar: Ytliga och djupgående strukturella faktorer som påverkar potentialen för hållbar k, Ändring av genomföranderam för en europeisk plattform för utbyte av balansenergi från frekvensåterställn ingsreserver med manuell, Rekommendationer för vaccination mot covid-19 för särskilda grupper av barn -, förstudie för att utvärdera förutsättningarna att genom en innovationsupphandli ng utveckla en drifttjänst för geoenergilager, Självkänsla och KBT ‐ Påverkas självkänslan vid KBT för depression och ångesttillstånd?Se lf‐esteem and CBT ‐ How does CBT for de, Matglädje för alla: en guide till rätt konsistens för olika behov, Secure Software Development for US Gov, mtpnet gov ma listes des fichiers pdf mtpnet gov ma mtpnet gov ma

You can download PDF versions of the user's guide, manuals and ebooks about Secure Software Development for US Gov, you can also find and download for free A free online manual (notices) with beginner and intermediate, Downloads Documentation, You can download PDF files (or DOC and PPT) about Secure Software Development for US Gov for free, but please respect copyrighted ebooks.