BlackBerry is introducing a new feature to BlackBerry Jarvis, the company’s software composition analysis tool, that enables those doing business with the U.S. Federal Government to comply with the recent software bill of materials (SBOM) requirement from President Biden’s Executive Order on Improving the Nation’s Cybersecurity.
Executive Order 14028 requires any vendor, supplier, or provider of technology solutions to the U.S. government to provide a full SBOM and demonstrate other cybersecurity management measures to ensure that any security vulnerabilities in the software supply chain of the nation’s critical infrastructure are identified and remediated immediately.
In response to the new standard, BlackBerry QNX has added a specific capability to BlackBerry Jarvis that enables users to efficiently generate a comprehensive SBOM report that follows the Software Package Data Exchange (SPDX®) report standard, one of the leading standards to support the U.S. government and other regulatory bodies.
“As multiple government and vertical-specific safety and security standards emerge, the need to have confidence in one’s codebase has taken on a new level of importance, particularly during a time in which multiple cybersecurity attacks have illustrated vulnerabilities present within the digital infrastructure of the U.S. Federal Government,” said Adam Boulton, Chief Technology Officer, BlackBerry Technology Solutions.
“BlackBerry Jarvis enables embedded software developers to demonstrate compliance, track software quality metrics and continuously harden their system so that it becomes more resilient to increasingly cunning attacks.
With BlackBerry Jarvis’ new ability to generate an SBOM report in the U.S. government’s mandated format, it’s now become an even more invaluable tool to procurement officers tasked with managing the nation’s cybersecurity and software supply chain risk.”
Available in early 2022, BlackBerry Jarvis will become one of the first software composition analysis tools to provide this key feature to embedded software developers whose products are used by the Federal Government.
This will empower these developers to keep software secure from all known issues based on the speedy and actionable intelligence provided by the tool.
“BlackBerry Jarvis meets the needs of the embedded software industry, allowing developers to gain deep visibility into the provenance of their software while automating the key steps in the binary scanning process in order to produce an SBOM in just minutes,” said Hiten Shah, Senior Analyst at Frost & Sullivan.
“Complying with this specific requirement in Biden’s Cybersecurity Executive Order is something which policymakers around the globe will no doubt roll out with ever more frequency in the face of a threat landscape that only seems to be growing in scale and complexity.
To that end, BlackBerry Jarvis helps OEMs bring trust, transparency and above all – peace of mind – into their software supply chains.”
We track anonymized user information to improve our website.
Because we respect your right to privacy, you can choose not to allow some types of cookies and processing. Click on the different category headings to find out more and change our default settings. Not allowing some types of cookies may impact your experience of our Services and what we are able to offer.
In order to use this website we use the following technically required cookies
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in. Loss of the information stored in a preference cookie may make the website experience less functional but should not prevent it from working.
This cookie enable us to detect the country of which you are visiting from.
These cookies may be set through our Services by our partners. Some have functional purposes such as capping the number of times you see an ad within a short span of time, but most, through uniquely identifying your browser and the device you use to access our Services and the processing of other information, will build a profile of your interests and show you ads more relevant to them, inferred from your browsing activity. If you do not allow these cookies, you will still receive ads but they will be less targeted and less likely to be relevant to your interests.