Areas of Long-Term Focus and Prioritization » CCC Blog

In September 2023, the Office of the National Cyber Director (ONCD), the Cybersecurity Infrastructure Security Agency (CISA), the National Science Foundation (NSF), the Defense Advanced Research Projects Agency (DARPA), and the Office of Management and Budget (OMB) published a request for information on Open-Source Software Security: Areas of Long-Term Focus and Prioritization. The RFI invited public comments on areas of long-term focus and prioritization on open-source software security.

Open-source software is crucial for national security, the economy, and technological innovation. Vulnerabilities in this software can lead to widespread negative impacts, especially since open-source software is extensively used in federal government and critical infrastructure. In 2021, the ONCD launched the Open-Source Software Security Initiative (OS3I) an interagency working group focused on bolstering the security of open-source software.

The RFI is part of the continuous efforts by OS3I to gather feedback from a wide range of stakeholders to determine the best areas for government attention, understand how the government can support the sustainability of open-source software communities, and decide on the best ways to implement open-source software security solutions.

You can read the CCC response here.