Aqua Security, pure-play cloud native security provider, has announced that it is the only enterprise-grade vendor providing software supply chain security attestation to meet the requirements of U.S. Executive Order (EO) 14028.
Aqua is helping software vendors to meet compliance requirements in under 30 days to prepare for 2023 deadline.
The order on improving cybersecurity lists all the software supply chain requirements that third-party software companies must meet or exceed to enhance U.S. cybersecurity and protect the nation from malicious cyber actors.
“This order has a vast impact on global software suppliers. If you sell to the government, or you sell to a company that sells to the government, you need to prove compliance,” explains Dror Davidoff, CEO and cofounder of Aqua Security.
“As software supply chain attacks increase in sophistication and scale, the private sector must adapt its proactive cybersecurity measures. EO 14028 is a critical and bold step for the United States to help prevent cyber incidents.”
Following EO 14028, in September 2022, a memo Enhancing the Security of the Software Supply Chain through Secure Software Development Practices was released listing the effective dates for agencies to ensure that the software they are procuring (and have previously procured) is compliant with the EO. Deadlines are as follows:
# By January 12, 2023 – Agency CIOs to communicate requirements to vendors
# By June 11, 2023 – Compliance attestation letters to be collected for critical software
# By September 14, 2023 – Compliance attestation letters to be collected for all software.
Meeting EO and Software Bill of Materials (SBOM) compliance with Aqua
Aqua Security’s software supply chain security is the only end-to-end solution that ensures protection across the entire software development lifecycle and will enable software providers to meet and attest to the EO requirements. The solution helps companies to complete compliance requirements within a month of deployment and includes the reporting and management capabilities for initial and ongoing compliance attestation.
“The clock is ticking—we are only 10 months away from the compliance deadline. Aqua is making it easy for software vendors to not only meet compliance requirements but also have the confidence that they can prevent software supply chain attacks,” said Davidoff.
