Update to January 2023 Supplier Documentation Requirements for Software Producers Offering Third-Party Software to NASA for Purchase and/or Use On January 23, 2023, NASA issued a memorandum to communicate requirements documented in OMB Memorandum M-22-18 directing Federal agencies to comply with the National Institute of Standards and Technology (NIST) Guidance when using third-party software on the agency鈥檚 information systems or otherwise affecting the agency鈥檚 information. M-23-16 reinforced the requirements established in M-22-18 and extended the timelines for agencies to collect attestations after the release of the CISA Secure Software Development Attestation Common Form (hereafter referred to as the 鈥淐ommon Form鈥�) and approval by OMB under the Paperwork Reduction Act (PRA). Full Memo: Update to Jan 2023 Supplier Documentation Requirements for Software Producers to NASA for Purchase or Use.