This whitepaper explains how organizations can comply with Executive Order 14028 by aligning their software development practices with the NIST Secure Software Development Framework. Issued in response to the rise in supply chain attacks, the executive order aims to strengthen the security of software used by the U.S. federal government. It establishes clear expectations for accountability, transparency, and secure development across the software lifecycle. The paper outlines how these requirements affect Authority to Operate processes and why traditional, reactive security approaches are no longer sufficient. By adopting the NIST SSDF, organizations can standardize secure development practices, improve supply chain security, and better meet federal compliance requirements while supporting

Join for free to read