80 percent of organizations not ready for CISA rules on security practices

The US Cybersecurity and Infrastructure Agency's (CISA) Secure Software Development Attestation Form rules come into force on June 11, 2024. This requires software producers who work with the US government to adhere to and confirm the deployment of key security practices. But new research from Lineaje reveals that 80 percent of companies are not ready. The report also finds that 84 percent of respondents' companies have not implemented software bills of materials (SBOMs) into their development process, despite Executive Order 14028 making SBOMs mandatory in May 2021. These findings demonstrate that, in many cases, the federal government's efforts to prevent… [Continue Reading]