Exec Order Could Force Software Vendors to Disclose Breaches to Federal Gov't Customers
A decision on the order, which contains several recommendations, is still forthcoming.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Months after the headline-making SolarWinds hack that impacted several government agencies and Fortune 500 companies, the White House is prepping an executive order to require software vendors to notify federal government customers if they experience a breach.
Reuters is reporting the news after reviewing a draft of the order. If approved, it would impact major software companies that sell to the government, like Microsoft or Salesforce.
A National Security Council spokeswoman said a decision on the order is still forthcoming, according to Reuters.
News of an executive order on software security was first reported in February. At that time, White House officials said the order would encourage software developers to build more security into their products.
The proposal on the table contains several recommendations, including the notification requirements for service providers. Vendors would still be required to preserve digital records for investigating hacks and work with the FBI and the Homeland Security Department's Cybersecurity Infrastructure Security Agency (CISA) when responding to incidents.
Congress has tried unsuccessfully in the past to pass a national data breach notification law.
Read more here.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024