Update to January 2023 Supplier Documentation Requirements for Software Producers Offering Third-Party Software to NASA for Purchase and/or Use On January 23, 2023, NASA issued a memorandum to communicate requirements documented in OMB Memorandum M-22-18 directing Federal agencies to comply with the National Institute of Standards and Technology (NIST) Guidance when using third-party software on the agency’s information systems or otherwise affecting the agency’s information. M-23-16 reinforced the requirements established in M-22-18 and extended the timelines for agencies to collect attestations after the release of the CISA Secure Software Development Attestation Common Form (hereafter referred to as the “Common Form”) and approval by OMB under the Paperwork Reduction Act (PRA). Full Memo: Update to Jan 2023 Supplier Documentation Requirements for Software Producers to NASA for Purchase or Use.
