New Guidelines for Enhancing Software Supply Chain Security Under EO 14028
summary
NIST guidance updates produced in response to Executive Order 14028 are explained, covering new standards and requirements for software supply chain security that affect federal software acquisition. The scope includes the entire federal software supply chain — consumer software and IoT devices — and the guidance was developed in consultation with industry and other federal agencies.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 2:30EO 14028
- 6:10Agenda
- 7:10Critical Software Security
- 8:02Why Critical Software
- 10:12Critical Software Guidance
- 12:40SDF
- 15:08SDF Practice Groups
- 17:20How to attest to these new practices
- 19:07Secure Software Development Framework
- 22:59Additional Guidance
- 23:52The Approach
- 25:47Emerging Concepts
- 33:27Cybersecurity Framework Update
- 40:04NIST 50th Anniversary
- 42:28QA
related talks
29mSupply Chain Security in the Software Era
01h 00mHot Topics in Cyber Law 2021
35mOpen Source Software (OSS) Transparency for Acquisition
48mSupply Chain Security: The Office of the National Cyber Director Perspective
25mLet’s Talk Software Supply Chains with TAG Security
29mGoogle SLSA & NIST SSDF: Emerging Software Supply Chain Security Best Practices
14mKeynote: The Next Steps in Software Supply Chain Security
49mThe Secure Software Supply Chain