How Does Executive Order 14306 Shift The Cyber Strategy For Government Contractors?

On June 6, a new Executive Order (EO) on cybersecurity altered the compliance landscape for federal contractors. The order pauses the imminent requirement for software vendors to formally attest compliance with the Secure Software Development Framework (SSDF) but keeps the underlying technical standards in place. Below, we dive into what this means for government contractors and provide recommendations to maintain compliance.

Key Takeaways for Contractors:

• Threat Landscape Reinforced: The EO explicitly reinforces the threat landscape previously identified in naming China, Russia, Iran, and North Korea, as persistent threat actors targeting the United States' cybersecurity
• Mandatory Attestations Are Paused: The most significant change is the suspension of the requirement that software vendors submit attestations of compliance with the Secure Software Development Framework (SSDF) to a government repository. The White House cited the process as burdensome and