software bill of materials

Army set to require SBOMs for new software by early next year

The Army’s software contracts will soon require vendors to provide bills of materials. The new policy applies to almost all software, except for cloud…

Army

Amelia Brust/Federal News Network

NSA, CISA call on software developers, suppliers to improve open source software management practices

Cybersecurity

Amelia Brust/Federal News Network

SBOMs are just the start, not the end, of the software supply chain conversation

Federal Insights

Federal CISO looks ahead to conversation around new contractor cyber rules

Acquisition Policy

The NSA has advice for protecting the smallest elements in the nation’s critical infrastructure

Technology

Rewarding good product security across the software ecosystem

Cybersecurity

Amelia Brust/Federal News Network

CISA, DHS eye open source software use in critical infrastructure

Cybersecurity

New cybersecurity guidance from the White House: A step in the right direction, but there’s more to be done

Commentary

From Log4j to zero trust, agencies have another busy year in cyber

Cybersecurity

NSA backs SBOM requirements in latest secure software advisory

Cybersecurity

Software developers with federal government customers must provide confirmation of NIST standards

Commentary

State Dept working toward SBOM adoption to improve supply chain risk management

Although there’s some disagreement over when agencies will actually start benefitting from them, many agencies are currently laying the foundation to…

Cybersecurity

When will SBOMs finally benefit the federal government’s software supply chain?

There’s wide consensus that SBOMs are a constructive building block for software supply chain security, perhaps especially for federal software supply…

Commentary

Industry associations raise alarm bells over legislating software security

Cybersecurity

Section 6722 of the 2023 NDAA would require DHS to mandate a bill of materials for technology from current and future contractors and some in industry are calling the provision problematic.