How CISA plans to get tech firms to bake security into their products

https://www.washingtonpost.com/politics/2023/02/06/how-cisa-plans-get-tech-firm
s-bake-security-into-their-products/

CISA plans to identify what secure-by-design secure-by-default everyone can
shoot for those goals, agency officials told me in an interview last week.
“They also plan to hail success stories in the tech industry,'' they said.

The entire technology supply chain must achieve and sustain NIST SP 800-53
compliance for CISA's effort to merit success. NIST SP 800-53 control family
practices, if conscientiously applied, can promote CISA objectives. This
Foreign Affairs essay
(https://www.foreignaffairs.com/united-states/stop-passing-buck-cyber
security) provides additional rationale.

Whether …

agency cisa compliance control critical default design family goals identify industry interview merit nist objectives officials plans practices products secure-by-default secure-by-design security sp 800-53 stories supply supply chain tech tech industry technology