Cybersecurity and Infrastructure Security Agency published a draft Secure Software Self-Attestation Form and Request for Comment. CISA form defines four secure development objectives that set the baseline expectation for US government-procured software products and services.