OMB rescinds ‘burdensome’ Biden-era secure software memo

The Trump administration rescinded OMB memo M-22-18, which established a common Secure Software Development Attestation Form to raise software supply chain security standards across federal procurement following SolarWinds. OMB now directs agencies to validate provider security via their own risk-based processes, optionally use the common form, maintain software/hardware inventories, and request SBOMs as needed. Critics warn the move erodes uniformity, reduces market pressure for secure-by-design practices, and could increase regulatory fragmentation across agencies.