The goal is to establish a baseline of cybersecurity hygiene and assurance for devices that are part of the national critical infrastructure software supply chain.