The executive order makes widespread mandates addressing software supply-chain security and outdated security models.