View Information Collection Request (ICR) Package

OMB Control No: 1670-0052	ICR Reference No: 202405-2501-001CF
Status: Active	Previous ICR Reference No:
Agency/Subagency: HUD/HUDSEC	Agency Tracking No:
Title: Secure Software Development Attestation Form
Type of Information Collection: RCF New	Common Form ICR:
Type of Review Request:
OIRA Conclusion Action: Approved without change	Conclusion Date: 05/06/2024
	Date Received in OIRA: 05/03/2024
Terms of Clearance:

	Inventory as of this Action	Requested	Previously Approved
Expiration Date	03/31/2027
Responses	350	0	0
Time Burden (Hours)	848	0	0
Cost Burden (Dollars)	0	0	0

Authorizing Statute(s): None

Citations for New Statutory Requirements: None

Associated Rulemaking Information
RIN:	Stage of Rulemaking:	Federal Register Citation:	Date:

Federal Register Notices & Comments
Did the Agency receive public comments on this ICR?

Number of Information Collection (IC) in this ICR: 1

IC Title	Form No.	Form Name
Secure Software Development Attestation Form	N/A

ICR Summary of Burden

	Total Approved	Change Due to Agency Discretion
Annual Number of Responses	350	350
Annual Time Burden (Hours)	848	848
Annual Cost Burden (Dollars)	0	0

Burden increases because of Program Change due to Agency Discretion: Yes

Burden Increase Due to: Miscellaneous Actions

Burden decreases because of Program Change due to Agency Discretion: No

Burden Reduction Due to:

Short Statement: This information collection requires software producers (e.g., developers and manufacturers) whose software is used by the Government to attest that they followed specific elements in the National Institute of Standards and Technology (NIST) Secure Software Development Framework (SSDF) during production and development of the software. Office of Management and Budget (OMB) Memorandum M-22-18, “Enhancing the Security of the Software Supply Chain through Secure Software Development Practices,” dated September 14, 2022, requires the Cybersecurity & Infrastructure Security Agency (CISA), in consultation with OMB, to develop a secure software attestation “common form” for Paperwork Reduction Act (PRA) clearance for all Federal departments and agencies.

Annual Cost to Federal Government:

Does this IC contain surveys, censuses, or employ statistical methods?

Does this ICR request any personally identifiable information (see OMB Circular No. A-130 for an explanation of this term)? Please consult with your agency's privacy program when making this determination.

Does this ICR include a form that requires a Privacy Act Statement (see 5 U.S.C. §552a(e)(3))? Please consult with your agency's privacy program when making this determination.

Is this ICR related to the Affordable Care Act [Pub. L. 111-148 & 111-152]? Uncollected

Is this ICR related to the Dodd-Frank Wall Street Reform and Consumer Protection Act, [Pub. L. 111-203]? Uncollected

Is this ICR related to the American Recovery and Reinvestment Act of 2009 (ARRA)? Uncollected

Is this ICR related to the Pandemic Response? Uncollected

Agency Contact: Laurence Chamber 202 402-6717

View ICR - OIRA Conclusion