WASHINGTON - The Cybersecurity and Infrastructure Security Agency announces today the availability of the Repository for Software Attestation and Artifacts that software producers who partner with the federal government can use to upload software attestation forms and relevant artifacts.
Last week, CISA and the Office of Management and Budget announced the secure software development attestation form, which enables software producers serving the federal government to attest to implementation of specific security practices.
Software integrity is key to protecting federal systems from malicious cyber actors seeking to disrupt our nation's critical functions.
This new repository will help federal agencies employ software from producers that attest to using sound secure development practices.
The attestation form will allow software producers to confirm that they follow those practices.
About CISA. As the nation's cyber defense agency and national coordinator for critical infrastructure security, the Cybersecurity and Infrastructure Security Agency leads the national effort to understand, manage, and reduce risk to the digital and physical infrastructure Americans rely on every hour of every day.
This Cyber News was published on www.cisa.gov. Publication date: Mon, 18 Mar 2024 16:13:06 +0000