# What every CISO should know about the new SSDF security self-attestation form

DevFeed: [What every CISO should know about the new SSDF security self-attestation form](<https://devfeed.tech/articles/what-every-ciso-should-know-about-the-new-ssdf-security-self-attestation-form-13316.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/what-every-ciso-should-know-about-the-new-ssdf-security-self-attestation-form>)

Published: 2023-08-08T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [cisa](<https://devfeed.tech/topics/cisa.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [cisa](<https://devfeed.tech/tags/cisa.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [regulatory](<https://devfeed.tech/tags/regulatory.md>), [secure-software](<https://devfeed.tech/tags/secure-software.md>), [secure-software-development-frameworks](<https://devfeed.tech/tags/secure-software-development-frameworks.md>), [self-attestation](<https://devfeed.tech/tags/self-attestation.md>), [software-security-audit](<https://devfeed.tech/tags/software-security-audit.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [ssdf](<https://devfeed.tech/tags/ssdf.md>), [standards](<https://devfeed.tech/tags/standards.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

## AI overview

This joint blog post explains a proposed Secure Software Self-Attestation Form published by CISA and its implications for CISOs. It describes how organizations selling software for government use may need to attest to their best efforts to follow NIST's Secure Software Development Framework, while highlighting related software supply chain security practices and regulatory developments.

## Source excerpt

Explore the pivotal SSDF Security Self-Attestation Form, a key resource for CISOs to navigate and enhance security compliance.