ITI Urges OMB to Work with Industry on New Self-Attestation Form
WASHINGTON – Today, global tech trade association ITI released the following statement from its Executive Vice President of Policy Gordon Bitko calling on the White House Office of Management and Budget (OMB) to utilize its central role and provide clarity on the Biden Administration’s new form for software developers:
“To achieve its goal of successfully securing software and ensure regulatory harmonization, the Biden Administration should engage in transparent and effective partnership with the tech industry. ITI is encouraged by the Cybersecurity and Infrastructure Security Agency’s (CISA) decision to waive the attestation requirements for FedRAMP certified services and to require due process through the Paperwork Reduction Act (PRA) for any deviating forms that agencies may develop. ITI calls on CISA and OMB to collaborate with industry to define key elements of the data collection process, including where responsibilities and accountabilities for inventory and collection lie, what risk factors will warrant the request of additional artifacts such as SBOMs, and next steps for deadlines outlined in OMB M-22-18.”
ITI has previously called on the Biden Administration to provide additional guidance (opens in a new tab) to providers so that the tech sector can help achieve the government’s objective of securing the software development process. Currently, software producers face significant barriers, including ambiguous terminology, confusing timelines, and the potential for regulatory fragmentation.
Related News & Analysis
Why an AI ‘Kill Switch’ isn’t a Catch-all Solution
AI is Supercharging Cyber Threats. Defenders Need New Tools and Partnerships.
