CISA updates secure-by-design principles to incorporate more details for manufacturers

The Cybersecurity and Infrastructure Security Agency has released an update to its secure-by-design principles in collaboration with federal and international partners, providing more detail on demonstrating specific practices.

“After the release in April 2023, the authoring organizations received thoughtful feedback from hundreds of individuals, companies, and trade associations. The most common request in the feedback was to provide more detail on the three principles as they apply to both software manufacturers and their customers,” the updated publication says.

The...