Cyber agency seeks comment on self-attestation form for software developers under Biden executive order

SAN FRANCISCO. CISA has opened a 60-day comment period on a cybersecurity “self-attestation form” for software producers, developed in line with President Biden’s 2021 cyber executive order and a 2022 memo from the Office of Management and Budget on how agencies should use the NIST Secure Software Development Framework.

“[T]he Executive order, through the Office of Management and Budget, requires agencies to only use software provided by software producers who can attest to complying with Federal Government-specified secure software development...