This incident and the Colonial Pipeline attack were the main drivers behind the Biden cybersecurity executive order "Executive Order on Improving the Nation’s C

This incident and the Colonial Pipeline attack were the main drivers behind the Biden cybersecurity executive order "Executive Order on Improving the Nation’s Cybersecurity" [1] which has driven changes to policy at NIST, FDA, OMB and others [2]. My opinion is that while these policies are fuzzy and lack specifics, it's just the first round of pushing industry in the correct direction without mandating specific tools or methods. In the EU, the proposed Cyber Resilience Act has maybe cast too wide of a net, snagging any open source contributor as a software "manufacturer". 1: https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/ https://www.whitehouse.gov/briefing-room/presidential-action... 2: https://edgebit.io/regulations/ https://edgebit.io/regulations/