CISA secure by design progress reports offer lessons learned amid efforts to measure progress

The Cybersecurity and Infrastructure Security Agency is helping companies build on each other’s successes in implementing secure by design practices, according to agency official Jack Cable, along with examining vulnerability reporting metrics to determine the impact of the initiative.

“We’ve already started to see measurable progress from many of the pledge signers, and one of the things we’ve heard is that people want to see where they can start to better understand what companies are doing,” Cable told Inside Cybersecurity....