NIST workshop participants raise concerns over conformance for software security standards, use of artifacts

NIST officials and industry leaders discussed different approaches for how conformance can be determined without reaching for a distinct conclusion on the best possible outcome, at a NIST workshop on Monday to gather feedback on upcoming executive order requirements.

The workshop is the latest in a series of NIST events to get input from stakeholders on its deliverables under a May cyber EO to secure federal networks. The EO tasks NIST with several deliverables around software supply chain security....