Requirements will emphasize Cloud Smart objectives and cybersecurity supply chain risk management while providing agencies an open source experience.

If implemented, OMB’s desired system would compare a session’s trust score to the trust requirement on a function or feature.

Next up the agency will publish finalized TIC 3.0 cloud use cases and a new version of the Zero Trust Maturity Model.

OMB has submitted two proposals for updating contract language to the FAR Council.

The use case is the last one required by the Office of Management and Budget in its September 2019 memo launching the initiative.

Practical deadlines for vendors and a concrete process for using the information SBOMs contain at agencies are needed, security experts say.