CISA, NSA, and ODNI Release Part One of Guidance on Securing the Software Supply Chain

Original release date: September 2, 2022CISA, the National Security Agency (NSA), and the Office of the Director of National Intelligence (ODNI), have published part one of a three-part joint publication series, Securing Software Supply Chain Series - Recommended Practices for Developers. This guidance—created by the Enduring Security Framework (ESF), a public-private cross-sector working group led by the NSA and CISA—focuses on software developers and provides suggested practices to ensure a more secure software supply chain. CISA encourages acquiring organizations, software...