Easterly: CISA’s next secure-by-design product will focus on ‘evidence’ to signal adoption of principles

The Cybersecurity and Infrastructure Security Agency’s next product to advance secure-by-design principles, due for release in October, will provide guidance on examples technology providers can use to signal adoption to consumers, according to Director Jen Easterly.

CISA released the first iteration of its secure-by-design and -default principles in June as a multi-seal product with the National Security Agency, FBI and international partners. Easterly said the agency held a “red pen” session in July at Def Con in Las Vegas...