6 ms·
If you sell software to the government you do. Which happens to be the biggest purchaser of software and touches others by proxy. E.G. you might provide softwar
by genmud 3y ago
If you sell software to the government you do. Which happens to be the biggest purchaser of software and touches others by proxy. E.G. you might provide software to Boeing who sells to the government, therefore Boeing has a legal obligation and requires all its suppliers to provide SBoMs. Or Dell, or HPE, or Cisco or literally every software / service provider.
- deviantbit 3y agoThis is not true either.
- genmud 3y agoI own a defense company, work on security stuff, I can assure you it is.
- deleted 3y ago[deleted]
- deviantbit 3y agoFunny. So do I. Military specs are governed through something call MIL-STD, not through NIST unless it directly references it. For instance BSSC 2005 gives guidelines on coding standards for Java, but no one follows them. If you were a contractor then you would know all specifications are waived unless specifically designated by your MOL and documented in GSA/SOW. So here is one of these internet know it all's that doesn't know anything.