{"id":26000,"date":"2023-07-17T20:04:10","date_gmt":"2023-07-17T20:04:10","guid":{"rendered":"https:\/\/staging.sightlinemg.com\/federaltimes\/uncategorized\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/"},"modified":"2026-08-08T05:02:24","modified_gmt":"2026-08-08T05:02:24","slug":"cyber-implementation-plan-leaves-open-questions-on-sboms-open-source","status":"publish","type":"post","link":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/","title":{"rendered":"Cyber implementation plan leaves open questions on SBOMs, open source"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">First, there was the strategy. Now, there\u2019s a plan.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The White House unveiled its \u201cto-do\u201d list for addressing cyber <a href=\"https:\/\/www.whitehouse.gov\/briefing-room\/statements-releases\/2023\/07\/13\/fact-sheet-biden-harrisadministration-publishes-thenational-cybersecurity-strategyimplementation-plan\/\" target=\"_blank\">weaknesses<\/a> last week, taking initiatives laid out in the March National Cybersecurity Strategy and now charging 18 federal agencies with tasks to be completed in the coming months and years to ensure the U.S. can ward off digital threats.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThis plan details more than 65 high-impact federal initiatives, from protecting American jobs by combating cybercrimes to building a skilled cyber workforce equipped to excel in our increasingly digital economy,\u201d the White House said on July 13.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The plan is sweeping, touching on several challenges that have hamstrung cyber security at the federal level. To combat them, the government will shape a workforce and education strategy aimed at bolstering cybersecurity talent, a multi-year plan to address aging technology and enforceable legislation to prosecute cybercrime. Industry leaders who commented on the plan applauded government for laying out several years worth of accountability, not just one.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe know it\u2019s a massive effort, it\u2019s going to take all hands,\u201d said Joel Krooswyk, federal chief technology officer at GitLab, in an interview. \u201cI think that is the right thing.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the last two months alone,<a href=\"https:\/\/www.federaltimes.com\/it-networks\/2023\/06\/21\/at-least-10-federal-agencies-contracted-with-hacked-software-maker\/\" target=\"_blank\"> widespread cyber attacks<\/a> propelled the looming threat to the forefront. But for years, government watchdogs have been hounding federal agencies to update susceptible legacy technology and fill cyber workforce shortages.<\/p>\n\n\n\t<aside class=\"smg-interstitial-link wp-block-smg-interstitial-link\">\n\t\t<a href=\"https:\/\/staging.sightlinemg.com\/federaltimes\/management\/2023\/07\/12\/us-government-linked-email-accounts-hacked-from-china-microsoft-says\/\" class=\"smg-interstitial-link__inner\">\n\t\t\t\t\t\t\t<div class=\"smg-interstitial-link__media\">\n\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"200\" src=\"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1229661300.jpg.jpg?w=300\" class=\"smg-interstitial-link__image wp-post-image\" alt=\"\" \/>\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"smg-interstitial-link__content\">\n\t\t\t\t<span class=\"smg-interstitial-link__kicker\">Related<\/span>\n\t\t\t\t<h3 class=\"smg-interstitial-link__title\">US government-linked email accounts hacked from China, Microsoft says<\/h3>\n\t\t\t\t\t\t\t\t\t<p class=\"smg-interstitial-link__excerpt\">The Storm-0558 hackers used forged authentication tokens \u2014 pieces of information used to verify the identity of a user \u2014 required to access the accounts.<\/p>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/a>\n\t<\/aside>\n\t\n\n\n<p class=\"wp-block-paragraph\">The other challenge is vacant leadership positions in offices critical to the plan\u2019s success. For one, it\u2019s unclear who will become the new national cyber director after The Washington Post reported that the acting official, Kemba Walden, <a href=\"https:\/\/www.washingtonpost.com\/national-security\/2023\/07\/15\/kemba-walden-nomination-cyber-director\/\" target=\"_blank\">would not be nominated.<\/a> That office is in charge of carrying out the implementation plan and reporting progress to the president and Congress.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The plan will be the government\u2019s cyber north star, but it shouldn\u2019t be the only way to navigate the future, experts said. For one, it lacks detail on some high-priority issues that industry experts said will be critical to reaching cyber and modernization goals.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWhat doesn\u2019t show up in the plan? Artificial intelligence,\u201d said Krooswyk. \u201cThe best chance we have of vaulting forward and making this work is going to require enormous efficiencies. And the way we get to those efficiencies right now is starting to look like AI.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AI can be of use to agencies who need help <a href=\"https:\/\/www.federaltimes.com\/federal-oversight\/congress\/2023\/05\/10\/fear-funds-and-fossilware-top-barriers-to-updating-federal-tech\/\" target=\"_blank\">translating millions of lines of ancient coding<\/a> or extracting insights from tied-up datasets, thereby freeing up the limited IT workforce to do other things. Some agencies already have many use cases for AI; others are a bit slower to adopt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The implementation plan also skirts issues such as open-source <a href=\"https:\/\/www.zdnet.com\/article\/whats-what-in-the-united-states-securing-open-source-software-act\/\" target=\"_blank\">software regulation.<\/a> More than two-thirds of <a href=\"https:\/\/www.whitehouse.gov\/administration\/cabinet\">cabinet-level agencies<\/a> maintain public code repositories. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without a standard, agencies may decide to adopt policies for themselves.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However regulation takes shape, the White House plan seems to indicate there is a desire to ensure open-source software has <a href=\"https:\/\/www.peters.senate.gov\/newsroom\/in-the-news\/senate-hsgac-okays-open-source-data-center-digital-id-bills\" target=\"_blank\">oversight and accountability. <\/a>Some experts pointed to the fact that by its nature, open source lacks a strong fingerprint, but the legal and regulatory burden has to fall on somebody at some point, said Varun Badhwar, CEO of <a href=\"https:\/\/nam04.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fwww.endorlabs.com%2F&#038;data=05%7C01%7Cmolly.weisner%40federaltimes.com%7C1cd2653b139946d6c44b08db84ded22b%7C1d5c96e57ee2446dbed8d0f8c50edea5%7C1%7C1%7C638249864780593743%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&#038;sdata=GmYvkMTSGxUtFl2WPTj9NLLAANjEe6vreiBHPgKc210%3D&#038;reserved=0\">Endor Labs<\/a>, in a statement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe\u2019re gonna have to watch the legislation for the next couple years,\u201d Krooswyk said. \u201cWithout some better guidance on that soon, what we\u2019re going to possibly see is some struggles with the implementation.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Similarly, the plan leaves some open questions about <a href=\"https:\/\/nam04.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fwww.federaltimes.com%2Fit-networks%2F2022%2F10%2F24%2Fsbom-disclosure-rules-loom-for-federal-software-procurement%2F&#038;data=05%7C01%7Ccary.oreilly%40mco.com%7C97fbced02e9f439cf80b08db4a613222%7C1d5c96e57ee2446dbed8d0f8c50edea5%7C1%7C1%7C638185553592740413%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&#038;sdata=z5rHUCeV7YkVLn8RovbhgLW%2F%2BSWWlM5K7nipo3yO2yE%3D&#038;reserved=0\">\u201csoftware bills of materials\u201d (aka \u201cSBOMs\u201d<\/a>) and how much they should play a more immediate role in identifying and mitigating risky technology.<\/p>\n\n\n\t<aside class=\"smg-interstitial-link wp-block-smg-interstitial-link\">\n\t\t<a href=\"https:\/\/staging.sightlinemg.com\/federaltimes\/thought-leadership\/2023\/05\/01\/is-memory-safety-the-killer-use-case-for-software-bills-of-materials\/\" class=\"smg-interstitial-link__inner\">\n\t\t\t\t\t\t\t<div class=\"smg-interstitial-link__media\">\n\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"200\" src=\"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/08\/programming-code.jpg.jpg?w=300\" class=\"smg-interstitial-link__image wp-post-image\" alt=\"\" \/>\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"smg-interstitial-link__content\">\n\t\t\t\t<span class=\"smg-interstitial-link__kicker\">Related<\/span>\n\t\t\t\t<h3 class=\"smg-interstitial-link__title\">Is \u2018memory safety\u2019 the killer use case for SBOMs?<\/h3>\n\t\t\t\t\t\t\t\t\t<p class=\"smg-interstitial-link__excerpt\">The federal government \u2014 the country\u2019s largest purchaser of software \u2014 will be using SBOMs to instruct security compliance for procurement.<\/p>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/a>\n\t<\/aside>\n\t\n\n\n<p class=\"wp-block-paragraph\">Per the plan, the government is aiming for 2025 to develop a process for closing gaps in <a href=\"https:\/\/www.federaltimes.com\/thought-leadership\/2023\/01\/30\/software-bill-of-materials-is-the-key-to-cybersecurity-compliance\/\" target=\"_blank\">SBOMs<\/a> and shoring up unsupported software in critical infrastructure. Again, it leaves out specifics the private sector could glean to respond to that goal. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThese are all blind spots that currently prevent us from understanding risk, and from a security standpoint, I\u2019m scared about what we\u2019ll find,\u201d Badhwar said.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The plan is sweeping, touching on several challenges that have hamstrung IT modernization at the federal level.<\/p>\n","protected":false},"author":7,"featured_media":74550,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":40,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[66,31,15,33,9,40],"tags":[],"coauthors":[3269],"class_list":["post-26000","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-career-management","category-home","category-management","category-newsletters","category-federal-oversight","category-watchdogs"],"acf":{"subheadline":"","legacy_arc_id":"GZ6JDL76QJE3VLQMJVLYZGOQVE","arc_canonical_url":"\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Cyber implementation plan leaves open questions on SBOMs, open source - Federal Times<\/title>\n<meta name=\"description\" content=\"The plan is sweeping, touching on several challenges that have hamstrung IT modernization at the federal level.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cyber implementation plan leaves open questions on SBOMs, open source\" \/>\n<meta property=\"og:description\" content=\"The plan is sweeping, touching on several challenges that have hamstrung IT modernization at the federal level.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/\" \/>\n<meta property=\"og:site_name\" content=\"Federal Times\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-17T20:04:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T05:02:24+00:00\" \/>\n<meta name=\"author\" content=\"Molly Weisner\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Molly Weisner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/f1587e1f8c0d41f0683bf42b02602ad8\"\n\t            },\n\t            \"headline\": \"Cyber implementation plan leaves open questions on SBOMs, open source\",\n\t            \"datePublished\": \"2023-07-17T20:04:10+00:00\",\n\t            \"dateModified\": \"2026-08-08T05:02:24+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/\"\n\t            },\n\t            \"wordCount\": 671,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/staging.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1414627330.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Career\",\n\t                \"Home\",\n\t                \"Inside the Agencies\",\n\t                \"Newsletters\",\n\t                \"Oversight\",\n\t                \"Watchdogs\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/\",\n\t            \"url\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/\",\n\t            \"name\": \"Cyber implementation plan leaves open questions on SBOMs, open source - Federal Times\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/staging.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1414627330.jpg.jpg\",\n\t            \"datePublished\": \"2023-07-17T20:04:10+00:00\",\n\t            \"dateModified\": \"2026-08-08T05:02:24+00:00\",\n\t            \"description\": \"The plan is sweeping, touching on several challenges that have hamstrung IT modernization at the federal level.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/staging.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1414627330.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/staging.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1414627330.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/2023\\\/07\\\/17\\\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Oversight\",\n\t                    \"item\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/\",\n\t                    \"ad_zone\": \"federal-oversight\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Watchdogs\",\n\t                    \"item\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/federal-oversight\\\/watchdogs\\\/\",\n\t                    \"ad_zone\": \"watchdogs\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 4,\n\t                    \"name\": \"Cyber implementation plan leaves open questions on SBOMs, open source\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"name\": \"Federal Times\",\n\t            \"description\": \"Federal Times\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#organization\",\n\t            \"name\": \"Federal Times\",\n\t            \"url\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/staging.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/staging.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"caption\": \"Federal Times\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/f1587e1f8c0d41f0683bf42b02602ad8\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/staging.sightlinemg.com\\\/federaltimes\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Cyber implementation plan leaves open questions on SBOMs, open source - Federal Times","description":"The plan is sweeping, touching on several challenges that have hamstrung IT modernization at the federal level.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/","og_locale":"en_US","og_type":"article","og_title":"Cyber implementation plan leaves open questions on SBOMs, open source","og_description":"The plan is sweeping, touching on several challenges that have hamstrung IT modernization at the federal level.","og_url":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/","og_site_name":"Federal Times","article_published_time":"2023-07-17T20:04:10+00:00","article_modified_time":"2026-08-08T05:02:24+00:00","author":"Molly Weisner","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Molly Weisner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#article","isPartOf":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/"},"author":{"name":"migration","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#\/schema\/person\/f1587e1f8c0d41f0683bf42b02602ad8"},"headline":"Cyber implementation plan leaves open questions on SBOMs, open source","datePublished":"2023-07-17T20:04:10+00:00","dateModified":"2026-08-08T05:02:24+00:00","mainEntityOfPage":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/"},"wordCount":671,"commentCount":0,"publisher":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#organization"},"image":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#primaryimage"},"thumbnailUrl":"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1414627330.jpg.jpg","articleSection":["Career","Home","Inside the Agencies","Newsletters","Oversight","Watchdogs"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/","url":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/","name":"Cyber implementation plan leaves open questions on SBOMs, open source - Federal Times","isPartOf":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#website"},"primaryImageOfPage":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#primaryimage"},"image":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#primaryimage"},"thumbnailUrl":"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1414627330.jpg.jpg","datePublished":"2023-07-17T20:04:10+00:00","dateModified":"2026-08-08T05:02:24+00:00","description":"The plan is sweeping, touching on several challenges that have hamstrung IT modernization at the federal level.","breadcrumb":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#primaryimage","url":"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1414627330.jpg.jpg","contentUrl":"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1414627330.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/2023\/07\/17\/cyber-implementation-plan-leaves-open-questions-on-sboms-open-source\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/staging.sightlinemg.com\/federaltimes\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Oversight","item":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/","ad_zone":"federal-oversight"},{"@type":"ListItem","position":3,"name":"Watchdogs","item":"https:\/\/staging.sightlinemg.com\/federaltimes\/federal-oversight\/watchdogs\/","ad_zone":"watchdogs"},{"@type":"ListItem","position":4,"name":"Cyber implementation plan leaves open questions on SBOMs, open source"}]},{"@type":"WebSite","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#website","url":"https:\/\/staging.sightlinemg.com\/federaltimes\/","name":"Federal Times","description":"Federal Times","publisher":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/staging.sightlinemg.com\/federaltimes\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#organization","name":"Federal Times","url":"https:\/\/staging.sightlinemg.com\/federaltimes\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/","url":"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","contentUrl":"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","caption":"Federal Times"},"image":{"@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/staging.sightlinemg.com\/federaltimes\/#\/schema\/person\/f1587e1f8c0d41f0683bf42b02602ad8","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/staging.sightlinemg.com\/federaltimes\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Federal Times","distributor_original_site_url":"https:\/\/staging.sightlinemg.com\/federaltimes","push-errors":false,"jetpack_featured_media_url":"https:\/\/staging.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1414627330.jpg.jpg","_links":{"self":[{"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/26000","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/comments?post=26000"}],"version-history":[{"count":1,"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/26000\/revisions"}],"predecessor-version":[{"id":26006,"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/26000\/revisions\/26006"}],"wp:attachment":[{"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/media?parent=26000"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/categories?post=26000"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/tags?post=26000"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/staging.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/coauthors?post=26000"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}