OpenC2 mentioned in NTIA report as part of EO

FYI: OpenC2 was mentioned in NTIA report published today as requested by President Biden’s
Executive Order (EO) on Improving
 the Nation’s Cybersecurity.

It’s on page 20 when discussing how to share sboms between producers and consumers and says:

OpenC2 is a standardized language for the command and control of technologies that provide or support cyber defense; work has begun to use it to handle, process, and act on SBOM data. 23

The footnote references openc2.org.

 

See the following for the full read.

Blog post: https://www.ntia.gov/blog/2021/ntia-releases-minimum-elements-software-bill-materials

 

Report page: https://www.ntia.gov/report/2021/minimum-elements-software-bill-materials-sbom

 

 

-- 

Duncan Sparrell

sFractal Consulting LLC

iPhone, iTypo, iApologize

I welcome VSRE emails. Learn more at http://vsre.info/