Secure Software Development Attestation: A(nother) Government Requirement

As follow-on guidance to Office of Management and Budget’s (OMB) September 14, 2022 memo and the associated Executive Order on Improving the Nation’s Cybersecurity from May 2021, the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security (CISA) has recently released a draft form for companies to attest to secure software development practices.