CISA, Partner Agencies Release Secure-by-Design

The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has recently updated guidance on its software design practices and approaches.  After working with hundreds of stakeholders, including companies and non-profits, CISA along with 17 agency partners released the “Secure-by-Design” paper.  The paper offers a series of practices and approaches for software manufacturers to design, manufacture, and ship their products with the upmost security.  The goal of the paper and subsequent campaigns is to change the paradigm of cybersecurity responsibility, shifting responsibility from the end-user to the manufacturers and service providers.  The belief is that cyberthreats can be better prevented if those who design software for the end users in the private and public sector include high measures of security in their design.  The CISA and its partner agencies are pushing software manufacturers to compete on the basis of security, thus giving their customers proof of their advancements in the field of cyber security.