The Cybersecurity and Infrastructure Security Agency (CISA) recently released its CISA Open Source Software Security Roadmap, which highlights the benefits of open source software (OSS) in the critical infrastructure sector. The roadmap CISA presents in this report aligns with the National Cybersecurity Strategy’s goal of “a more resilient, equitable, and defensible cyberspace.” CISA seeks to manage the risks to the federal government and critical infrastructure by protecting the OSS they rely on.
The four goals presented in this report are as follows:
- Establishing CISA’s role in supporting the security of OSS.
- Understanding the prevalence of key open source dependencies.
- Reducing risks to the federal government.
- Hardening the broader OSS ecosystem.
OSS is key to achieving a secure and resilient cyberspace, along with the objectives of the National Cybersecurity Strategy. CISA, in partnership with federal agencies and the OSS community, plays a vital role in making this vision a reality.
For more information, check out HSDL’s In Focus topics on Cyber Infrastructure Protection and Cyber Policy.
