Cybersecurity best practices have taken a significant leap forward with this US GSA Announcement

The US Government General Services Administration (GSA) has taken a major step toward improving software cyber security with this announcement

The era of blind faith in digital objects is ending and radical transparency begins on June 8, 2024 using the CISA Repository for Software Attestations and Artifacts (RSAA) portal. Now, software producers and makers of digital products for sale to the US government will require a secure software attestation to be filed.

SUBJECT: Supplement 2 to MV-2023-02; Ensuring Only Approved Software is Acquired and Used at GSA

Timeline for Collection & Updates to Associated GSA IT Policy
 

Starting June 8, 2024, GSA will begin collecting Common Forms for new contracts (including
micro-purchases) and the exercise of contract options, that include the use of software,
regardless of whether or not the software is considered critical.
 

U.S. General Services Administration
1800 F Street, NW
Washington, DC 20405
www.gsa.gov