# self attestation Published articles for self attestation. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Elastic achieves Defence Cyber Certification Level 0 in the UK DevFeed: [Elastic achieves Defence Cyber Certification Level 0 in the UK]() Original publisher: [Read original article]() Author: Christine Bocci,Ryan Kam Published: 2026-08-13T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Security](), [Resilience]() Tags: [2026](), [security](), [self-attestation](), [standards](), [supply-chain](), [uk](), [verification]() ### AI overview Elastic has achieved Defence Cyber Certification Level 0 in the UK, meeting the Ministry of Defence's baseline cyber assurance requirement for organisations in the defence supply chain ahead of the 31 December 2026 deadline. ### Source excerpt Elastic has achieved Defence Cyber Certification (DCC) Level 0 -- the UK Ministry of Defence's baseline cyber assurance standard for the defence supply chain. Here's what it means and why it matters. ## What every CISO should know about the new SSDF security self-attestation form DevFeed: [What every CISO should know about the new SSDF security self-attestation form]() Original publisher: [Read original article]() Published: 2023-08-08T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [cisa](), [Cybersecurity](), [Security]() Tags: [chainguard-images](), [cisa](), [cve](), [cybersecurity](), [fedramp](), [regulatory](), [secure-software](), [secure-software-development-frameworks](), [self-attestation](), [software-security-audit](), [software-supply-chain-security](), [ssdf](), [standards](), [vulnerability-management]() ### AI overview This joint blog post explains a proposed Secure Software Self-Attestation Form published by CISA and its implications for CISOs. It describes how organizations selling software for government use may need to attest to their best efforts to follow NIST's Secure Software Development Framework, while highlighting related software supply chain security practices and regulatory developments. ### Source excerpt Explore the pivotal SSDF Security Self-Attestation Form, a key resource for CISOs to navigate and enhance security compliance. ## Government perspectives on software self-attestation requirements DevFeed: [Government perspectives on software self-attestation requirements]() Original publisher: [Read original article]() Published: 2023-06-15T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [cisa](), [Cybersecurity](), [chainguard](), [Security]() Tags: [chainguard](), [cisa](), [cybersecurity](), [fedramp](), [nist](), [open-source-security](), [regulatory](), [secure-by-design](), [security](), [self-attestation](), [software-supply-chain](), [software-supply-chain-security](), [ssdf]() ### AI overview Chainguard CEO Dan Lorenc and CISA Fellow Chris Hughes discuss CISA's draft software self-attestation form, its relationship to federal software supply chain security requirements, and the regulatory context surrounding secure software development. ### Source excerpt Chainguard CEO Dan Lorenc and Chris Hughes, CISO & Cofounder of Aquia and CISA Fellow discuss the upcoming software self-attestation form. ## The importance of toolchain security in NIST's SSDF DevFeed: [The importance of toolchain security in NIST's SSDF]() Original publisher: [Read original article]() Published: 2023-06-12T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [toolchain](), [Security](), [Architecture & Design](), [Software Engineering]() Tags: [cloud-security](), [fedramp](), [nist](), [secure-software](), [security](), [self-attestation](), [ssdf](), [supply-chain-attacks](), [toolchain]() ### AI overview This article argues that build systems and programming-language toolchains should be secured and inventoried like production systems. It discusses third-party code execution during installation and highlights Go toolchain vulnerabilities that enabled remote code execution during builds. ### Source excerpt The new Secure Software Development Framework (SSDF) from NIST places toolchain inventory management and security front and center. ## How to explain the CISA software attestation requirements to your board DevFeed: [How to explain the CISA software attestation requirements to your board]() Original publisher: [Read original article]() Published: 2023-05-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [cisa](), [cybersecurity and infrastructure security agency](), [software bill of materials](), [Security]() Tags: [attestation](), [chainguard](), [cisa](), [container-security](), [government](), [national-cybersecurity-strategy](), [nist](), [policy](), [sbom](), [sboms](), [secure-container-image](), [secure-software](), [self-attestation](), [signing-artifacts](), [sigstore](), [software-artifact-signing](), [software-bill-of-materials](), [software-supply-chain-security](), [ssdf]() ### AI overview This article explains how software companies can brief their boards on CISA software attestation requirements and the broader federal software supply chain security policy landscape. It discusses Executive Order 14028, SBOMs, secure software development, CISA's Secure Software Development Attestation Form, and the requirements in OMB Memorandum M-22-18, including alignment with NIST guidance. ### Source excerpt CISA's draft self-attestation form clarifies the minimum requirements that software developers must meet to comply with OMB Memorandum M-22-18.