Skip to main content

Like many websites, BSA’s websites use cookies to ensure the efficient functioning of those websites and give our users the best possible experience. You can learn more about how we use cookies, and how you can change your browser's cookie settings, in our cookies statement. By continuing to use this site without changing your cookie settings, you consent to our use of cookies.


NOV 09, 2021 | US

NIST Workshop Participants Raise Concerns Over Conformance for Software Security Standards, Use of Artifacts

Inside Cybersecurity, November 9, 2021

By Sara Friedman

NIST officials and industry leaders discussed different approaches for how conformance can be determined without reaching for a distinct conclusion on the best possible outcome, at a NIST workshop on Monday to gather feedback on upcoming executive order requirements.

BSA asks how “how software developers would demonstrate conformance with the practices or tasks identified” in the SSDF.

“Once NIST (and subsequently OMB pursuant to Section 4(k) of the EO) determines the requirements, how will the US Government determine if software conforms to its requirements, and who will attest that conformance has been demonstrated?” BSA commented. “If self-attestation is insufficient and a third-party is required, will NIST act as the third party and if not, what organization will?”


Original Posting: https://insidecybersecurity.com/daily-news/nist-workshop-participants-raise-concerns-over-conformance-software-security-standards


BSA | The Software Alliance (www.bsa.org) is the leading advocate for the global software industry before governments and in the international marketplace. Its members are among the world’s most innovative companies, creating software solutions that help businesses of all sizes in every part of the economy to modernize and grow.

With headquarters in Washington, DC, and operations in more than 30 countries, BSA pioneers compliance programs that promote legal software use and advocates for public policies that foster technology innovation and drive growth in the digital economy.


Michael O’Brien

For Media Inquiries


Media Inquiries


Media Inquiries


Media Inquiries