CISA’s secure software self-attestation common form is a liability nightmare

On September 2022, the United States Office of Management and Budget (OMB) issued a landmark memo regarding the steps needed to secure your software supply chain to a degree acceptable by the US federal government. Any company that wishes to do business with the government and any federal agency producing software needs to comply with the requirements and timeline put forth in the M-22–18 memo.

M-22–18 focused on the security and integrity of the software supply chain, paying particular …

agency attestation budget business cisa cybersecurity federal federal agency federal government government liability management office office of management and budget omb producing regulation secure software september software software supply chain states supply supply chain united united states