Trump cyber EO cuts self-attestation requirements as work begins at NIST to update software security guidance

President Trump’s June 6 cyber executive order eliminates the CISA verification aspect of requirements from the Biden administration for software providers to self-attest their compliance with security measures, while directing NIST to update guidance on the topic.

Section two of former President Biden’s Jan. 16 cyber EO focused on bringing transparency to third party software, building efforts started under the first Biden EO on cyber released in May 2021. Under Biden’s Jan. 16 EO, the Office of Management...