The White House is planning an executive order that will demand more of the government’s software suppliers, but there won’t be any binding requirements for at least six months, an official working on the order said.
“I think you’re looking at six months to a year depending upon the criticality of the software before you’ll see anything binding. So there will be an opportunity to adjust to anything that’s out there,” said Jeff Greene, acting senior director for cybersecurity at the National Security Council.