The cybersecurity agency CISA and other government agencies call to action for the US government to take steps to close the software understanding gap. This gap is the result of manufacturers building software that mission owners and operators lack the adequate capacity to verify, meaning that they cannot fully understand the software. According to the authoring agencies, the US government needs to take decisive action to close the gap before other countries do, such as China. The software understanding gap results in an inability to build vulnerability-free software, to address defects as soon as they are discovered, maintain the software at speed of mission relevance, and secure it against exploits.

Read more: https://www.securityweek.com/us-government-agencies-call-for-closing-the-software-understanding-gap/