Industry vendors have until June 26 to comment on the provisional document.

Cybersecurity leaders agree on the need for a standardized recipe list for software, but implementing an effective compliance regime remains a challenge.

National Security Council official Steve Kelly says the White House is targeting a January launch for new self-attestation requirements.

The now-excised section 6722 was earlier criticized by industry as “vague” and “internally inconsistent.”

A new White House memo on software supply chain security goes some way to addressing tech industry concerns about the use of third-party cybersecurity assessors.

Many in government and industry want software bills of materials to be the development compliance standard.

Contractors have called for the software bill of materials to become a universal standard for secure development compliance.

Practical deadlines for vendors and a concrete process for using the information SBOMs contain at agencies are needed, security experts say.

Officials touted the agency's success as civilian cyber operational lead, during a House hearing Tuesday.

Companies want clarification from government over what specific artifacts and metadata it wants to assess.