Goldstein: CISA security principles for software intended to be ‘first chapter’ as discussions kick off to get feedback

CISA executive assistant director for cyber Eric Goldstein says the initial set of principles jointly released with international partners on secure-by-design and security-by-default are intended to be a starting point and there will be opportunities for stakeholders to weigh in on next steps.

The principles were developed in response to CISA Director Jen Easterly’s remarks at Carnegie Mellon where she pushed technology manufacturers to implement secure-by-design practices in order to shift the responsibility for security away from consumers....