Tech group urges CISA to consider promoting secure software deployment amid work on secure by design

The Cybersecurity and Infrastructure Security Agency should pair its secure by design initiative with a focus on ensuring software products are “secure by operation,” according to the Information Technology Industry Council.

“While secure by design products bolster security, the security of the environments in which those products are deployed is just as consequential to security outcomes. It is important that secure by design guidance clearly recognizes cybersecurity as a shared responsibility,” ITI says in a Feb. 20 filing to...