Open Source Security

Dick Brooks from Business Cyber Guardian discusses the landscape of federal software security requirements, we discuss frameworks like CISA's Software Acquisition Guide, Secure Software Development Framework, and the EU's Cyber Resilience Act. These regulations impact open source projects differently from commercial vendors, Dick helps explain what that means for the vendors as well as open source developers.

The accompaning blog can be found at

https://opensourcesecurity.io/2025/01-government_security_requirements_with_dick_brooks

CISA Software Acquisition Guide
CISA SAG Reader Project
NASA SSDF collaboration