Release of CISA-OMB final software common form kicks off six-month deadline for compliance

Procurement officials will require software producers to self-attest compliance with the long-awaited release of a final common form on secure software development, as requirements mandated by the Office of Management and Budget kick in over the next six months.

OMB and the Cybersecurity and Infrastructure Security Agency published on Monday the final secure software self-attestation common form. OMB issued two memorandums in 2023 that established requirements for agencies on secure software development processes.

“This self-attestation form identifies the minimum...