Feds focus on enhancing security of open-source software initiatives

TLDR:

Key Points:

• A White House working group is prioritizing open-source software security initiatives
• New initiatives include partnerships, software bills of material, and a government open-source program office at CMS

Article Summary:

Federal agencies are focusing on securing open-source software due to the increasing need to combat cyberattacks. Initiatives for the upcoming fiscal year include partnerships, developing software bills of material, strengthening the supply chain, and establishing a government open-source program office at the Centers for Medicare and Medicaid Services. The National Cyber Director highlighted the importance of contributing back to the community and leveraging open source for cybersecurity challenges. The open-source program office at CMS has been on a journey for many years and is focused on establishing guidance, policies, practices, and talent pipelines. This initiative is part of a larger effort to advance open-source software security within the federal government, following the National Cybersecurity Strategy and the Bipartisan Infrastructure Law. CISA is also working on its own open-source program office and plans to provide guidance to other agencies. Overall, the focus on open-source software security is a key priority for federal agencies in 2025.