Inside Cybersecurity, September 28, 2022

By Sara Friedman

BSA’s Henry Young describes the impacts of the Office of Management and Budget’s decision to require self-attestation from companies against NIST secure software standards.

“The memo provides adequate security measures. Companies take self-attestations very seriously and no company wants to sign an inaccurate document. In limited circumstances, a third-party certification may make sense, but for the vast majority of software, an attestation should be sufficient,” Young said.

Read More >>

Original Posting: https://insidecybersecurity.com/share/13930