thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Executive Order 14028

The May 2021 U.S. order 'Improving the Nation's Cybersecurity' that drove federal SBOM and secure development attestation requirements.

Definition

EO 14028 directed NIST to publish secure software development guidance (leading to SSDF), defined critical software, and called for SBOMs, zero trust adoption and improved incident sharing. OMB memos M-22-18 and M-23-16 require agencies to obtain attestations from software producers.

Example

A SaaS vendor submits the CISA Secure Software Development Attestation Form to sell to a federal agency.

Exam tip

Link EO 14028 to SSDF, SBOMs and supplier attestations.

Related terms