The Cybersecurity and Infrastructure Security Agency has introduced the Software Acquisition Guide: Supplier Response Web Tool, an interactive web tool aimed at enhancing secure software supply chain procurement.
CISA is a DHS agency. Register for the Potomac Officers Club’s 2025 Homeland Security Summit to learn about various programs, initiatives, and other key developments meant to bolster homeland security against emerging threats.
Strengthening Cybersecurity in Software Acquisition
CISA said Tuesday the new tool is intended to enable IT leaders, procurement experts and software suppliers to reinforce the cybersecurity protocols utilized during end-to-end software acquisition. The tool aims to provide a user-friendly digital platform that optimizes software assurance and supplier risk assessments. It expands on the “Software Acquisition Guide for Government Enterprise Consumers: Software Assurance in the Cyber-Supply Chain Risk Management Lifecycle.”
The web tool advances secure-by-design and secure-by-default principles by reformatting the Software Acquisition Guide into adaptive sections that assist users based on their needs and enable them to focus on relevant questions for their specific procurement. It also provides shareable summaries for CISOs, CIOs and other key executives while enhancing due diligence for more secure acquisitions.
Remarks From CISA Executive
“This tool demonstrates CISA’s commitment to offering practical, free solutions for smarter, more secure software procurement. Transforming the Software Acquisition Guide into an interactive format simplifies integrating cybersecurity into every step of procurement,” said CISA Director of Public Affairs Marci McCarthy.
