The Cybersecurity and Infrastructure Security Agency released updated procurement guidance emphasizing secure-by-design principles. Federal buyers will apply the framework immediately.
Vendors face new questionnaire requirements. Industry groups broadly support the direction.
