Executive Order 14028

What Is Executive Order 14028?

Executive Order 14028, “Improving the Nation's Cybersecurity,” is a 2021 U.S. federal directive that established baseline cybersecurity requirements for federal software suppliers — including software bills of materials, secure development practices, and zero trust architecture — substantially raising the bar for software sold to the federal government.

EO 14028 is one of the most consequential cybersecurity policies of the past decade. It made SBOMs a federal procurement expectation, elevated firmware integrity verification as a baseline federal practice (alongside NIST 800-193), and pushed the broader market toward independent verification of software supplier claims. Compliance has shaped federal procurement and remains widely expected across adjacent industries, though specific operational requirements have evolved through subsequent OMB and FAR actions.

NetRise Turbine produces audit-ready evidence aligned to EO 14028 — including binary-derived SBOMs, firmware analysis, and independent verification of what is actually inside the software federal suppliers deliver.

Related Terms

EU Cyber Resilience Act · Software Bill of Materials · Firmware · NIST CSF 2.0