# nist Published articles for nist. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence DevFeed: [How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence]() Original publisher: [Read original article]() Author: Bethany Carter Published: 2026-09-15T16:40:06Z Content type: article Language: en Sources: [Confluent: Data in motion]() Topics: [Security](), [Business Security](), [vulnerability management](), [Cloud]() Tags: [apra](), [automated](), [cloud](), [compliance](), [confluent](), [confluent-cloud](), [data-protection](), [gdpr](), [identity](), [iso](), [nist](), [security](), [standards](), [third-party](), [trust-center](), [vulnerability-management]() ### AI overview Confluent explains how its Trust Center provides third-party risk assessment reports to support vendor security, resilience, compliance, procurement, and customer due diligence. The article describes assessments including ProcessUnity Global Risk Exchange and control mapping to customer frameworks. ### Source excerpt Confluent's Trust Center simplifies vendor risk reviews with CyberGRX, CyberVadis, SIG, CAIQ, and TruSight/KY3P assessments. ## Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA DevFeed: [Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA]() Original publisher: [Read original article]() Author: Norman St. Laurent Published: 2026-09-15T13:13:53Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Cybersecurity](), [Cisco](), [telemetry](), [Zero Trust](), [vulnerability](), [Network]() Tags: [benchmark](), [cisco](), [cisco-secure-network-analytics-sna](), [cybersecurity](), [department-of-defense-dod](), [government](), [hardening](), [industries](), [nist](), [public-sector](), [stig](), [visibility]() ### AI overview The article explains how the DISA Security Technical Implementation Guide for Cisco Secure Network Analytics turns Zero Trust policy into testable configuration requirements. The STIG provides a shared hardening baseline for the platform and its management functions, with 31 requirements derived from NIST SP 800-53 and related requirements. ### Source excerpt Discover how the new DISA STIG for Cisco Secure Network Analytics helps defense organizations securely configure and harden their analytics platform, ensuring trusted network visibility for Zero Trust operations. ## Canada's CPCSC and Bill C-8 are coming. Here's what you need to do. DevFeed: [Canada's CPCSC and Bill C-8 are coming. Here's what you need to do.]() Original publisher: [Read original article]() Published: 2026-05-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Cybersecurity](), [Critical Infrastructure](), [Security](), [Containers](), [Cloud Native Ecosystem]() Tags: [bill-c-8](), [canada-cmmc](), [canadian-program-for-cyber-security-certification](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [cmmc](), [compliance](), [containers](), [cpcsc](), [critical-infrastructure](), [cybersecurity](), [federal-compliance](), [fedramp](), [nist](), [zero-cve-containers]() ### AI overview This article explains Canada's Canadian Program for Cyber Security Certification (CPCSC) and Bill C-8, focusing on the implications for defence suppliers and organizations in critical infrastructure. It describes the CPCSC as a mandatory cybersecurity certification regime, compares its technical basis with CMMC and NIST Special Publications 800-171 and 800-172, and outlines why organizations should prepare for Level 1 requirements. The article also describes how Chainguard can help Canadian defence suppliers meet those requirements with secure, zero-CVE containers. ### Source excerpt CPCSC compliance is coming fast. Learn how Chainguard helps Canadian defence suppliers meet Level 1 requirements with secure, zero-CVE containers. ## CMMC Phase 2, explained: Requirements, deadlines, and who's affected DevFeed: [CMMC Phase 2, explained: Requirements, deadlines, and who's affected]() Original publisher: [Read original article]() Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Cybersecurity](), [Security & Privacy](), [Cryptography](), [vulnerability management](), [vulnerability scanning](), [Encryption](), [MFA]() Tags: [certificates](), [cmmc](), [cmmc-container-images](), [cmmc-phase-2](), [cmvp](), [compliance](), [cve](), [cybersecurity-maturity-model-certification](), [fips](), [nist](), [sboms](), [stig](), [stigs](), [supply-chain](), [u-s-dod](), [vulnerability-management](), [vulnerability-scanning]() ### AI overview This article explains the requirements, deadlines, and scope of CMMC Phase 2. It describes the CMMC Level 2 certification requirements for organizations handling Controlled Unclassified Information or supporting Department of Defense and certain civilian agency contracts, including MFA, encryption, vulnerability scanning, supported systems, independent assessments, and compliance documentation. ### Source excerpt CMMC Phase 2 and NIST 800-171 are here. Learn how Chainguard helps teams meet compliance with FIPS, STIGs, and zero-CVE containers. ## NIST CSF 2.0 and Agentic AI: Building Profiles for Autonomous Systems DevFeed: [NIST CSF 2.0 and Agentic AI: Building Profiles for Autonomous Systems]() Original publisher: [Read original article]() Author: info@goteleport.com (Matthew Smith) Published: 2026-04-20T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Cybersecurity](), [AI Agent](), [Security](), [Artificial Intelligence]() Tags: [agentic-ai](), [ai](), [ai-agent](), [best-practices](), [cybersecurity](), [governance](), [monitoring](), [nist](), [security]() ### AI overview This article explains how organizations can tailor NIST Cybersecurity Framework 2.0 for autonomous AI systems through a Cyber AI Profile. It focuses on adapting governance, identity, monitoring, and audit practices to account for AI agents operating without continuous human approval. ### Source excerpt Learn how to tailor NIST CSF 2.0 for autonomous systems using the Cyber AI Profile, with guidance on agent identity, governance, and monitoring ## EU AI Act Compliance: Requirements, Risks, and What to Document DevFeed: [EU AI Act Compliance: Requirements, Risks, and What to Document]() Original publisher: [Read original article]() Author: info@goteleport.com (Kayne McGladrey, CISSP) Published: 2026-04-15T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Artificial Intelligence](), [Requirements](), [Documentation](), [audit](), [data-governance](), [Logging](), [Monitoring](), [Deployment](), [data]() Tags: [ai](), [compliance](), [cybersecurity](), [data](), [data-governance](), [dataset](), [deployment](), [development](), [documentation](), [eu](), [iso-27001](), [lifecycle](), [logging](), [monitoring](), [nist](), [real-time](), [reproducibility](), [soc-2](), [versioning]() ### AI overview A practical guide to EU AI Act compliance covering requirements, risks, technical documentation, logging, data governance, lifecycle evidence, traceability, monitoring, and human oversight. It outlines key compliance milestones from August 2025 through August 2027. ### Source excerpt Cut through EU AI Act complexity with practical guidance on requirements, risks, and documentation. ## NIST 800-171 and Agentic AI: What Autonomous Systems Mean for CUI Protection DevFeed: [NIST 800-171 and Agentic AI: What Autonomous Systems Mean for CUI Protection]() Original publisher: [Read original article]() Author: info@goteleport.com (Matthew Smith) Published: 2026-04-08T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Artificial Intelligence](), [Security](), [deploying agentic AI](), [Authorization](), [audit]() Tags: [access-control](), [agentic-ai](), [ai](), [audit](), [compliance](), [deploying-agentic-ai](), [nist](), [security]() ### AI overview This article explains how agentic AI affects the practical application of NIST 800-171 requirements for organizations handling Controlled Unclassified Information. It focuses on access control, auditing, and data protection when autonomous agents query databases, trigger workflows, or transfer data to external services. ### Source excerpt How does agentic AI impact NIST 800-171 compliance? Learn how autonomous systems affect access control, auditing, and CUI protection. ## How to Apply NIST 800-53 to AI Systems DevFeed: [How to Apply NIST 800-53 to AI Systems]() Original publisher: [Read original article]() Author: info@goteleport.com (Matthew Smith) Published: 2026-03-13T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Artificial Intelligence](), [AI Infrastructure](), [Access Control](), [audit](), [configuration-management](), [Security](), [Monitoring]() Tags: [access-control](), [agentic](), [ai](), [ai-infrastructure](), [audit](), [configuration-management](), [monitoring](), [nist](), [security]() ### AI overview This tutorial explains how NIST SP 800-53 applies to AI and agentic systems. It focuses on how autonomous systems complicate existing security controls and introduces Access Control, Audit and Accountability, and Configuration Management as starting points for further risk assessment. ### Source excerpt Learn to apply NIST 800-53 to agentic systems and AI infrastructure with control guidance on identity, auditing, configuration management, and monitoring. ## Announcing Kernel-Independent FIPS for Java DevFeed: [Announcing Kernel-Independent FIPS for Java]() Original publisher: [Read original article]() Published: 2025-08-14T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [Java](), [Cryptography](), [Cybersecurity](), [container images](), [Linux]() Tags: [amazon](), [ato](), [azure](), [chainguard](), [chainguard-containers](), [chainguard-fips-images](), [compliance](), [container-images](), [cos](), [cryptography](), [fedramp](), [fedramp-ato](), [fedramp-containers](), [fips](), [implementation](), [java](), [linux](), [nist](), [openssl](), [security]() ### AI overview Chainguard announces Kernel-Independent FIPS availability across its Java FIPS image catalog. The update uses FIPS-validated cryptography and validated userspace entropy, allowing Java FIPS workloads to run with any host kernel and on platforms including GKE with COS, Amazon Bottlerocket, Flatcar Linux, and Azure Linux. It is intended to simplify production deployment and accelerate FedRAMP authorization to operate. ### Source excerpt Kernel-Independent FIPS is now available across the full catalog of Chainguard FIPS images for Java, simplifying and accelerating compliance for FedRAMP ATO. ## Meeting the AI Mandates with Confidence: Why Federal Teams Trust Snyk DevFeed: [Meeting the AI Mandates with Confidence: Why Federal Teams Trust Snyk]() Original publisher: [Read original article]() Author: Phoebe Nerdahl Published: 2025-08-07T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [ai security](), [AI Strategy](), [AI Development](), [Security](), [Vulnerabilities](), [AI Platform](), [GitHub](), [Terraform]() Tags: [agentic-ai-security](), [ai](), [ai-adoption](), [ai-infrastructure](), [ai-security](), [awareness](), [blog](), [compliance](), [devops](), [executive](), [github](), [government](), [nist](), [sboms](), [secure-by-design](), [security](), [self-hosted](), [snyk](), [snyk-platform](), [terraform](), [vulnerabilities]() ### AI overview This article explains how Snyk for Government helps federal agencies adopt AI securely through secure-by-design development, continuous vulnerability management, compliance support, automation, and governance. It highlights integrations across developer workflows, FedRAMP authorization, standards-aligned practices, and the Snyk AI Trust Platform. ### Source excerpt Learn how Snyk for Government helps federal agencies meet AI mandates with confidence. Snyk's AI Trust Platform ensures secure-by-design development, compliance, and transparent AI systems. ## FIPS-Validated Container Images: When, Where, and Why DevFeed: [FIPS-Validated Container Images: When, Where, and Why]() Original publisher: [Read original article]() Published: 2025-07-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [Encryption](), [Cryptography](), [Security]() Tags: [chainguard](), [compliance](), [container-images](), [cryptography](), [encryption](), [fedramp](), [financial-services](), [fips](), [fips-validation](), [healthcare](), [nist](), [public-sector](), [security]() ### AI overview This article explains why FIPS-validated cryptography is required at the container image level for workloads subject to FedRAMP and NIST 800-53 requirements. It describes Chainguard's FIPS-validated container images, their cryptographic boundaries, and how they help organizations address compliance and authorization requirements in regulated environments. ### Source excerpt Chainguard's catalog of 1,400+ trusted container images includes 400+ FIPS-validated variants. ## Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones DevFeed: [Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones]() Original publisher: [Read original article]() Published: 2025-06-06T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [Security](), [Testing](), [interoperability]() Tags: [chainguard](), [chainguard-containers](), [chainguard-fips](), [compliance](), [container-images](), [cryptographic](), [digital-signature](), [ed25519](), [federal-compliance](), [federal-information-processing-standards](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [nist](), [openssl](), [security](), [signing](), [standards](), [validation]() ### AI overview Chainguard FIPS container images are being upgraded to support current FIPS 140-3 and FIPS 186-5 standards, including OpenSSL with FIPS 140-3 validation and Ed25519 signing support. ### Source excerpt Chainguard FIPS images have been upgraded to start using the OpenSSL project 3.1.2 module with FIPS 140-3 validation. Learn more about what this means. ## Chainguard Containers Enabled with PQC Support DevFeed: [Chainguard Containers Enabled with PQC Support]() Original publisher: [Read original article]() Published: 2025-06-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Post Quantum Cryptography (PQC)](), [Cryptography](), [TLS (Transport Layer Security)](), [Security, Privacy and Abuse Prevention](), [ssh](), [Internet Engineering Task Force (IETF)]() Tags: [chainguard-containers](), [compliance](), [cryptography](), [encryption](), [fips](), [ietf](), [nist](), [post-quantum-cryptography](), [post-quantum-cryptography-pqc](), [quantum](), [ssh](), [tls]() ### AI overview Chainguard Containers now support Post-Quantum Cryptography (PQC), including FIPS 203 ML-KEM and other algorithms used in TLS and SSH communications. The article explains the risks posed by quantum attacks and "harvest now, decrypt later" scenarios, and describes ongoing work toward FIPS-certified PQC implementations. ### Source excerpt Chainguard Containers support Post-Quantum Cryptography (PQC). Learn more about what PQC is, and what Chainguard is doing to offer it today. ## Chainguard Signs CISA's Secure Software Development Attestation Form DevFeed: [Chainguard Signs CISA's Secure Software Development Attestation Form]() Original publisher: [Read original article]() Published: 2025-02-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard](), [open-source-security](), [Cybersecurity]() Tags: [announce](), [chainguard](), [chainguard-images](), [cisa](), [container-images](), [cybersecurity](), [fedramp](), [government](), [nist](), [product-security](), [provenance](), [secure-software](), [software-supply-chain-security](), [standards](), [supply-chain-attacks](), [supply-chain-security]() ### AI overview Chainguard announces that it has signed CISA's Secure Software Development Attestation Form. The attestation states that Chainguard products align with NIST's Secure Software Development Framework and federal software supply chain security requirements, including secure development environments, trusted source code supply chains, automated controls, and provenance data. ### Source excerpt Chainguard has recently signed CISA's Secure Software Development Attestation Form, attesting to the security of Chainguard and its products. ## How NIST is changing standards to safeguard AI DevFeed: [How NIST is changing standards to safeguard AI]() Original publisher: [Read original article]() Published: 2024-08-19T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [Responsibility & Safety](), [ai safety](), [AI Strategy](), [Microsoft](), [ChatGPT]() Tags: [chatgpt](), [copilot](), [gemini](), [generative-ai](), [nist](), [responsible-ai](), [risk-management](), [security](), [standards]() ### AI overview The article explains how NIST is developing AI safety and security guidelines in response to the White House's October 2023 Executive Order. It highlights generative AI risks such as disinformation, phishing, malware development, and sensitive-data leaks, and describes planned companion resources for the AI Risk Management Framework and Secure Software Development Framework. ### Source excerpt New NIST AI standards address generative AI risks with a focus on risk management, security practices, and recognizing synthetic content. ## Achieve CMMC 2.0 compliance with Chainguard FIPS Images DevFeed: [Achieve CMMC 2.0 compliance with Chainguard FIPS Images]() Original publisher: [Read original article]() Published: 2024-08-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard fips images](), [Cybersecurity](), [container images](), [Security]() Tags: [chainguard](), [chainguard-fips](), [chainguard-fips-images](), [cmmc](), [cmmc-2-0](), [compliance](), [container-images](), [cybersecurity](), [fips](), [government](), [nist](), [requirements](), [standards](), [stig]() ### AI overview This article explains how Chainguard FIPS-enabled, STIG-hardened container images may help organizations address CMMC 2.0 requirements. It outlines the framework's three assessment levels, including Level 2 requirements tied to NIST SP 800-171, and discusses compliance risks for organizations seeking U.S. government contracts. ### Source excerpt Master CMMC 2.0 compliance! Get expert insights, downloadable resources, and guidance to safeguard your sensitive data. ## Understanding NIST's latest updates on container image security DevFeed: [Understanding NIST's latest updates on container image security]() Original publisher: [Read original article]() Published: 2024-07-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Containers](), [supply-chain-security](), [Cybersecurity](), [Security]() Tags: [authentication](), [authorization](), [chainguard-images](), [container-image-security](), [container-security](), [containers](), [cybersecurity](), [image-security](), [nist](), [software-supply-chain](), [supply-chain-security](), [vulnerabilities]() ### AI overview This article explains NIST guidance relevant to container image security, including risks from misconfiguration, runtime threats, limited visibility, governance gaps, and compliance issues. It discusses NIST SP 800-161 Revision 1 and its focus on cybersecurity supply chain risk management, vulnerability monitoring, configuration management, authorization, and authentication. ### Source excerpt Learn about NIST's latest updates on container image security and how it impacts your organization's security posture. ## NIST's role in enhancing software supply chain security DevFeed: [NIST's role in enhancing software supply chain security]() Original publisher: [Read original article]() Published: 2024-07-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security]() Tags: [container-image-security](), [nist](), [software-supply-chain-security]() ### AI overview The article explains NIST's role in software supply chain security, including its Cybersecurity Framework, guidance following Executive Order 14028, and recommended practices such as risk assessment, supplier controls, SBOMs, incident response, and continuous monitoring. ### Source excerpt NIST's framework for enhancing software supply chain security: Learn how the NIST is guiding organizations to build a more secure software ecosystem. ## Introducing Chainguard's Trust Center DevFeed: [Introducing Chainguard's Trust Center]() Original publisher: [Read original article]() Published: 2024-05-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [supply-chain-security](), [chainguard images](), [soc 2]() Tags: [audit](), [certifications](), [chainguard](), [compliance](), [iso-27001](), [nist](), [security](), [slsa](), [soc](), [soc2](), [software-security-audit](), [software-security-best-practices](), [software-supply-chain](), [software-supply-chain-security](), [trust-center]() ### AI overview Chainguard introduces its Trust Center, a platform that centralizes security, compliance, and privacy information for users and customers. The center provides access to independent penetration-testing assessments, a SOC 2 Type 2 audit report, hardening guidance, privacy information, data-subprocessor details, and information security policies. ### Source excerpt Learn how Chainguard prioritizes security with our new Trust Center. Find info on our policies, certifications, and how we protect your software supply chain. ## Is your container security FedRAMP Rev 5 ready? DevFeed: [Is your container security FedRAMP Rev 5 ready?]() Original publisher: [Read original article]() Published: 2024-05-07T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [supply-chain-security](), [Cybersecurity](), [Containers](), [Cloud](), [Security](), [Architecture & Design]() Tags: [cloud](), [compliance](), [compliance-management](), [container](), [container-security](), [cybersecurity](), [federal-contractor](), [federal-government-compliance-program-requirements](), [fedramp](), [fedramp-rev-5](), [government-contract-jobs](), [hardening](), [nist](), [security](), [software-supply-chain](), [software-supply-chain-security](), [visibility](), [what-are-compliance-requirements]() ### AI overview The article explains how FedRAMP Rev 5 changes cloud security expectations for providers serving the US government. It emphasizes NIST SP 800-53 Rev 5 alignment, software supply chain security, container hardening, documentation, monitoring, and transition deadlines. ### Source excerpt Is your container security FedRAMP Rev 5 compliant? Discover the key requirements and how Chainguard can help. ## Snyk Learn and the NIST Cybersecurity Framework (CSF) DevFeed: [Snyk Learn and the NIST Cybersecurity Framework (CSF)]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2024-03-06T14:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-learn](), [Cybersecurity](), [Application Security](), [Development](), [Vulnerabilities](), [sdlc](), [Cryptography]() Tags: [application-security](), [awareness](), [blog](), [cybersecurity](), [developer](), [development](), [education](), [engineering](), [nist](), [sdlc](), [snyk](), [snyk-learn](), [vulnerabilities]() ### AI overview The article explains how Snyk Learn supports the Protect function of NIST Cybersecurity Framework 2.0 through developer-focused cybersecurity training. It covers topics including SQL injection, cryptography, server-side request forgery, and memory leaks, with the goal of helping developers build security into applications earlier in the SDLC and reduce production risk. ### Source excerpt Find out how Snyk Learn helps development teams with the "Protect" function of NIST CSF 2.0. ## Enhancing code to cloud security with the Common Configuration Scoring System DevFeed: [Enhancing code to cloud security with the Common Configuration Scoring System]() Original publisher: [Read original article]() Author: Wayne Crissman; Tal Dromi Published: 2023-12-14T14:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [iac-security](), [snyk-iac](), [Infrastructure as code](), [configuration](), [Application Security](), [sdlc](), [Security]() Tags: [application-security](), [aspm](), [awareness](), [blog](), [cloud-security](), [code-security](), [configuration](), [developer](), [engineering](), [iac](), [infrastructure-as-code](), [metrics](), [nist](), [sdlc](), [security](), [security-rules](), [snyk](), [snyk-security-intel](), [standards]() ### AI overview Snyk is standardizing its code-to-cloud security rules on the Common Configuration Scoring System (CCSS). The change applies to Snyk Infrastructure as Code (IaC), IaC+, and cloud configurations, using technical severity, threat intelligence, and application and business context to produce clearer risk assessments. ### Source excerpt To eliminate this burden and provide our customers with a clear security assessment for configurations across the SDLC, Snyk will be moving towards standardizing our code to cloud security rules set on the Common Configuration Scoring System (CCSS)! ## An update on Chainguard Images FIPS Validation DevFeed: [An update on Chainguard Images FIPS Validation]() Original publisher: [Read original article]() Published: 2023-09-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Encryption](), [Security](), [Utility Software]() Tags: [chainguard](), [chainguard-images](), [container](), [containers](), [cryptographic](), [encryption](), [fedramp](), [fips](), [fips-140-3](), [fips-validation](), [migration](), [nist](), [openssl](), [wolfi]() ### AI overview Chainguard describes its FIPS-ready Chainguard Images, which use an OpenSSL 3.0.8 module validated by NIST for FIPS 140-2. The article explains the validation process, support for FedRAMP requirements, available FIPS-enabled base images, planned migration toward FIPS 140-3, and a utility for verifying that the module is correctly installed and configured to use approved cryptographic algorithms. ### Source excerpt Need support on your FedRAMP journey? Chainguard's FIPS Images use the OpenSSL 3.0.8 module that is validated by NIST for 140-2. ## Government perspectives on software self-attestation requirements DevFeed: [Government perspectives on software self-attestation requirements]() Original publisher: [Read original article]() Published: 2023-06-15T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [cisa](), [Cybersecurity](), [chainguard](), [Security]() Tags: [chainguard](), [cisa](), [cybersecurity](), [fedramp](), [nist](), [open-source-security](), [regulatory](), [secure-by-design](), [security](), [self-attestation](), [software-supply-chain](), [software-supply-chain-security](), [ssdf]() ### AI overview Chainguard CEO Dan Lorenc and CISA Fellow Chris Hughes discuss CISA's draft software self-attestation form, its relationship to federal software supply chain security requirements, and the regulatory context surrounding secure software development. ### Source excerpt Chainguard CEO Dan Lorenc and Chris Hughes, CISO & Cofounder of Aquia and CISA Fellow discuss the upcoming software self-attestation form. [Next page]()