NSA and CISA issues recommendations to secure the software supply chain

The NSA and CISA have issued recommendations to software developers on how to secure the software supply chain.

Tips include writing secure code, testing third-party components, hardening the build environment, and securely delivering code.

The guidance was issued in response to recent high-profile cyber attacks, such as the SolarWinds hack.

The following two parts of this series will concentrate on software suppliers and customers.

After FireEye revealed that its network had been breached in December 2020, the SolarWinds attack resulted in the compromise of multiple US government agencies.