Need help with your CMMC assessment scope?
Download Sentar’s latest whitepaper, “Tips on Establishing Your Assessment Scoping Boundary from a C3PAO”
CISA Secure Software Development Framework Assessments
If your government contractor sells or licenses software to U.S. federal agencies, your company may be required to attest that it develops its software products/components following NIST SP 800-218, the Secure Software Development Framework (SSDF).
Need help with Self-Attesting to the CISA Secure Software Development Framework?
Our team is familiar with assisting companies as they navigate the requirements associated with Self-Attestation. As a FedRAMP 3PAO, Sentar is qualified to verify your company’s compliance against NIST 800-218.
Regardless of whether you are seeking assistance on how to self-attest one software development program or twenty-five plus, Sentar 3PAO can ensure your deadlines are reached to maintain customer satisfaction.
Our deliverables include:
- A Discussion Workshop to help the organization determine what is in scope for Self-Attestation
- A Letter of Attestation confirming compliance against NIST 800-218 (for each business unit/program, as applicable)
- A Security Assessment Report (SAR) outlining the company’s assessment results for each control as defined by NIST 800-218 (for each business unit/program, as applicable)
- A list of POA&Ms (as applicable)
In creating our assessment methodology, our team has been utilizing the following:
- NIST SP 800-37 Risk Management Framework: A System Life Cycle Approach for Security and Privacy
- NIST SP 800-218: Secure Software Development Framework (SSDF)
- Executive Order (EO) 14028, Improving the Nation’s Cybersecurity
- Memorandum m-17-09
- Memorandum m-23-16
- OWASP DevSecOps Guideline
- Security Measures for EO-Critical Software Use | NIST
- Critical Software – Definition & Explanatory Material | NIST
- Executive Order 14028, Improving the Nation’s Cybersecurity | NIST
- NIST SP 800-53 Rev. 5
For more information, please contact:
Chandler Hall
chandler.hall@sentar.com
(256) 836-7853
We’re Hiring
Join the fastest-growing team in cyber