Cybersecurity Policy Report, Software Supply Chain Security Tool Offered by CISA, (Aug 27, 2025)
The Cybersecurity and Infrastructure Security Agency (CISA) has released a “Software Acquisition Guide: Supplier Response Web Tool” that builds on other software security guidance and tools and simplifies the way users assess software assurance and supplier risk.
The new web tool is a free interactive resource designed to help “information technology (IT) and industry decision makers, procurement professionals and software suppliers strengthen cybersecurity practices throughout the software procurement lifecycle.” The tool also supports the secure-by-design and secure-by-default principles by, among other things, “helping users focus on the most relevant questions and supporting stronger due diligence and more secure outcomes across procurement efforts.”
The release is part of CISA’s effort to strengthen software supply chain resilience by providing modern tools to address the continually evolving cybersecurity landscape.
“This tool demonstrates CISA’s commitment to offering practical, free solutions for smarter, more secure software procurement,” said Marci McCarthy CISA’s director–public affairs. “Transforming the Software Acquisition Guide into an interactive format simplifies integrating cybersecurity into every step of procurement.”
News: FederalLegislation DataSecurity