CISA, FBI provide guidance on secure software update deployment with input from JCDC partners

The Cybersecurity and Infrastructure Security Agency has released guidance in partnership with the Joint Cyber Defense Collaborative on how software manufacturers and service providers can deliver secure updates to users, as part of the agency's secure by design work.

“This guidance aids software manufacturers in implementing a safe software deployment process with robust testing and measurement components. The process laid out by CISA, FBI, and Australian Cyber Security Centre (ACSC) helps both the security and quality of products and deployment...