New Cybersecurity EO Released

In early June, President Trump released an Executive Order designed to modify sections of Orders 13694 and 14144 previously released by former administrations and “strengthen the nation’s cybersecurity by focusing on critical protections against foreign cyber threats and enhancing secure technology practices.” We’ll look at the latest provisions and implications therein specifically to software, quantum and AI development.
Software
The latest Trump EO directs the Secretary of Commerce and NIST to “establish a consortium that demonstrates the implementation of secure software development, security and operations practices based on NIST Special Publication 800–218 (Secure Software Development Framework(SSDF))” by August 1, 2025. This is followed by a further directive for NIST to also “publish a preliminary update to the SSDF. This preliminary update shall include practices, procedures, controls, and implementation examples regarding the secure and reliable development and delivery of software as well as the security of the software itself.”
The Secure Software Development Framework was developed by NIST as a guide for best practices and designed to include better security into each stage of software development. With the latest Order, vendors and partners can expect to see updated software development guidelines in the spring of 2026.
Quantum, AI and the FAR Inclusions
There is also a call for DHS, CISA and the NSA to release and “update a list of product categories in which products that support post-quantum cryptography (PQC) are widely available.”
And looking toward AI, the EO asks for more overall visibility of data, and management of AI software vulnerabilities. The DoD, DHS and and Director of National Intelligence are charged with management, incident tracking, response and reporting of “indicators of compromise for AI systems” by November 1, 2025.
There is also discussion of the amended FAR, and “for agencies to, by January 4, 2027, require vendors to the Federal Government of consumer Internet-of-Things products, as defined by 47 CFR 8.203(b), to carry United States Cyber Trust Mark labeling for those products.”
So What?
For vendors and reseller partners across the public sector, it will be increasingly important to pay close attention to cybersecurity vulnerabilities, and the advancement in particular of AI and quantum technologies, their development and anticipated review by agencies. Expect additional federal scrutiny and preference for PQC-ready products in upcoming procurements. Evaluate your product portfolios and roadmap investments in quantum-resilient security, especially for sectors supporting critical infrastructure. Reporting obligations and risk controls for AI-enabled offerings are expected, especially regarding incident tracking and vulnerability disclosure. Vendors providing AI to federal customers should invest in monitoring and response capabilities for AI system security incidents. And on the software front, as is always good practice, vendors and partners should pay keen attention to the development and implementation of the SSDF, as the administration continues its focus on streamlining software development and procurement in the near future.
To get more TD SYNNEX Public Sector Market Insight content, please visit our Market Intelligence microsite.
About the Author:
Susanna Patten is a senior manager on the TD SYNNEX Public Sector Market Insights team covering tech trends across the Public Sector. Susanna has over 15 years of experience in public sector IT procurement. Her responsibilities at TD SYNNEX Public Sector include driving market intelligence asset production, ensuring the quality and relevance of deliverables from the Market Insights team, and aligning these insights with sales opportunities.