CISA's Security by Design for software development: 'It's a starting point, not an endpoint'

The recent guidance by the Cybersecurity and Infrastructure Security Agency (CISA) about securing software by design and default has garnered some praise from the security community.

The guidance has an impressive array of developers. In addition to CISA, backers include the Federal Bureau of Investigation, the National Security Agency, and the cybersecurity authorities of Australia, Canada, United Kingdom, Germany, Netherlands, and New Zealand.

However, like many efforts in this domain by CISA, the Secure by Design initiative is a good …

addition agency array australia canada cisa community cybersecurity default design developers development domain end endpoint federal federal bureau of investigation germany guidance infrastructure infrastructure security initiative investigation national national security national security agency netherlands new zealand point security security by design software software development start united united kingdom