Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Presentation

Secure Software Development Framework Update and DevSecOps Project

May 20, 2026

Michael Ogata - NIST

This presentation provided updates on NIST work on the Secure Software Development Framework (SSDF) and Development, Security and Operations (DevSecOps) projects. Including the following:

1. A high level description of what qualities secure software should have that is

Agnostic/broadly applicable regardless of software development setup and language

2. A common language for discussing and comparing current secure software development practices

3. A way to map this guidance to existing industry guidance for developing secure software

NIST-SSDF-DevSecOps-Updates (PDF)

Parent Project

See: Cybersecurity Supply Chain Risk Management

Secure Software Development Framework Update and DevSecOps Project

Presenters

Description

Downloads

Parent Project

Related Topics