The Impact of U.S. Government Mandates on AppSec
Channel: Endor Labs
Date: 28/11/2023

In this session from LeanAppSec Fall 2023, Chris Hughes (Chief Security Advisor, Endor Labs) discusses the impact of United States government mandates on application security. Chris gets into five government mandates and frameworks that were created in response to the explosion of software supply chain attacks, modern application security best practices, and the proliferation of open source software.

00:08 - Factors that prompted U.S. government mandates
08:30 - Executive Order 14028 Improving the Nation’s Cybersecurity
10:18 - OMB 22-18 Enhancing the Security of the Software Supply Chain through Secure Software Development Practices
14:58 - OMB 23-16 (an update to OMB 22-18)
19:20 - Secure Software Development Framework (SSDF)
23:00 - FDA Ensuring Cybersecurity of Medical Devices/Section 524B
26:59 - Federal policies impact all organizations

—Learn More—

5 Federal Software Supply Chain Requirements You Should Be Aware Of
https://www.endorlabs.com/blog/5-federal-software-supply-chain-requirements-you-should-be-aware-of

—LeanAppSec by Endor Labs— 
LeanAppSec is an application security educational program by Endor Labs. It includes quarterly live events featuring industry experts (like this video) and on demand courses.
https://www.leanappsec.com/

—---------------------------
Follow Us on LinkedIn
https://www.linkedin.com/company/endorlabs

Learn More About Endor Labs
https://www.endorlabs.com/