NOV 09, 2021 | US
NIST Workshop Participants Raise Concerns Over Conformance for Software Security Standards, Use of Artifacts
Inside Cybersecurity, November 9, 2021
By Sara Friedman
NIST officials and industry leaders discussed different approaches for how conformance can be determined without reaching for a distinct conclusion on the best possible outcome, at a NIST workshop on Monday to gather feedback on upcoming executive order requirements.
BSA asks how “how software developers would demonstrate conformance with the practices or tasks identified” in the SSDF.
“Once NIST (and subsequently OMB pursuant to Section 4(k) of the EO) determines the requirements, how will the US Government determine if software conforms to its requirements, and who will attest that conformance has been demonstrated?” BSA commented. “If self-attestation is insufficient and a third-party is required, will NIST act as the third party and if not, what organization will?”
Original Posting: https://insidecybersecurity.com/daily-news/nist-workshop-participants-raise-concerns-over-conformance-software-security-standards
À PROPOS DE BSA
BSA | The Software Alliance (www.bsa.org) est le principal organisme de défense et de promotion de l’industrie du logiciel auprès des administrations gouvernementales et sur le marché international. Ses membres comptent parmi les entreprises les plus innovantes au monde, à l’origine de solutions logicielles qui stimulent l’économie et améliorent la vie moderne.
Basée à Washington, DC et présente dans plus de 30 pays, BSA est pionnière en matière de programmes de conformité qui encouragent l’utilisation légale de logiciels et plaide en faveur de politiques publiques à même de promouvoir l’innovation technologique et de favoriser la croissance économique numérique.