The attestation form information will be used by the Federal Housing Finance Agency (FHFA) to provide great assurances that help understand whether the software provider performed due diligence followed secure code practices which align with NIST 800-216 Secure Software Development Practices (SSDF). OMB circular M-22-18 requires CISA in consultation with OMB to develop a secure software attestation common form for all federal departments and agencies. FHFA will collect software attestation information from software suppliers.
EO: EO 14028 Name/Subject of EO: Improving the Nation’s Cybersecurity