CISA releases cyber performance goals for information technology and product design sector

The Cybersecurity and Infrastructure Security Agency has published sector-specific cyber performance goals for the information technology sector that build on secure by design principles and address product security.

The IT sector-specific goals are designed “to protect the sector from cyber incidents, identify and address vulnerabilities prior to product release, improve incident response, and significantly improve software security,” CISA said today in a release.

The agency said, “CISA worked extensively with the IT Sector Coordinating Council (IT SCC) to develop...