CISA Attestation

Full Title or Meme

To get CISA Attestation, companies need to show they follow certain security practices in four main areas according to the NIST SSDF – secure development environments, secure software supply chain, maintain code and artifact provenance, and check for vulnerabilities. Do you comply?

Context

To get CISA Attestation, companies need to show they follow certain security practices in four main areas according to the NIST SSDF – secure development environments, secure software supply chain, maintain code and artifact provenance, and check for vulnerabilities. Do you comply?

References

• See wiki page on Attestation