Guide to the Cybersecurity 14028 Executive Order Impact

This white paper discusses the Cybersecurity Executive Order 14028, issued on May 12, 2021, aimed at enhancing the cybersecurity infrastructure in the United States. It outlines several key themes, including the implementation of stronger cybersecurity standards across federal systems, improving incident response capabilities, modernizing government networks, and enhancing information sharing between government and private sectors. The paper also details the roles of the Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) in coordinating and implementing the provisions of the executive order. It emphasizes the importance of secure software supply chains and the development of a Secure Software Design Framework (SSDF) to guide organizations in producing well-secured software. Additionally, it highlights the significance of integrating security into the software development lifecycle from the outset, ensuring that security requirements are addressed early in the design process. The paper concludes by noting the broader implications of the executive order for embedded software development across various sectors.