Loading...
Skip to main content

JUL 08, 2021 | US

NIST Defines ‘Critical Software,’ Implications to Follow

Government Technology, July 8, 2021

By Jule Pattison-Gordon

The White House likely expects forthcoming EO-critical security standards to ripple out to the wider software landscape, beyond just government procurements, according to Henry Young, who previously worked at NIST and now is director of policy at the Software Alliance (BSA), a US-headquartered international software industry advocacy group. The idea is that vendors working for the federal government will simply follow these rules for all their products, making safer products more easily available to everyone.

Should security rules be too rigid, however, vendors might instead create compliant products for the federal government and less secure alternative versions to sell to the general public, Young told GT. He did not see significant risks of this happening, he said.

Aaron Cooper, BSA vice president of Global Policy, told GT that the security requirements NIST settles on will need to be flexible enough to ensure the guidance stays relevant and useful for the long term. Overly prescriptive rules may make sense for the present day but won’t keep up as technology and risks evolve.

For example, a hypothetical policy requiring software verify users via four-digit PINs would be wise 20 years ago but become a liability if it were still in place today, because it would prevent use of biometric or multifactor authentication, Cooper said.

Read More >>

Original Posting: https://www.govtech.com/security/nist-defines-critical-software-implications-to-follow

SOBRE A BSA

A BSA | The Software Alliance (www.bsa.org) é a principal defensora do setor global de software perante governos e no mercado internacional. Seus membros estão entre as empresas mais inovadoras do mundo, criando soluções de software que estimulam a economia e melhoram a vida moderna.

Com sede em Washington, DC e operações em mais de 30 países, a BSA promove programas de conformidade que promovem o uso legal de software e defendem políticas públicas que promovem a inovação tecnológica e o crescimento da economia digital.

CONTATOS DE MÍDIA

Anna Hughes

Telephone: 202-530-5177
E-mail: annah@bsa.org

Riley McBride Smith

Telephone: 202-591-1125
E-mail: Riley@allisonpr.com

For Media Inquiries

E-mail: media@bsa.org

CONTATOS DE MÍDIA

Anna Hughes

Telephone: 202-530-5177
E-mail: annah@bsa.org

CONTATOS DE MÍDIA

Christine Lynch

CONTACTO DE PRENSA

Anna Hughes

Telephone: 202-530-5177
E-mail: annah@bsa.org