CISA and FBI Release Joint Guidance on Product Security Bad Practices for Public Comment

ronjor · Oct 16, 2024

Release Date October 16, 2024

Today, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released joint guidance on Product Security Bad Practices, a part of CISA’s Secure by Design initiative. This joint guidance supplies an overview of exceptionally risky product security bad practices for software manufacturers who produce software in support of critical infrastructure or national critical functions.
Click to expand...

As a nation, we have allowed a system where the cybersecurity burden is placed disproportionately on the shoulders of consumers and small organizations and away from the producers of the technology and those developing the products that increasingly run our digital lives. Americans need a new model to address the gaps in cybersecurity—a model where consumers can trust the safety and integrity of the technology that they use every day
Click to expand...

.

Products designed with Secure by Design principles prioritize the security of customers as a core business requirement, rather than merely treating it as a technical feature. During the design phase of a product’s development lifecycle, companies should implement Secure by Design principles to significantly decrease the number of exploitable flaws before introducing them to the market for widespread use or consumption.
Click to expand...

Out-of-the-box, products should be secure with additional security features such as multi-factor authentication (MFA), logging, and single sign-on (SSO) available at no extra cost.
Click to expand...

https://www.cisa.gov/securebydesign

Triple Helix · Oct 16, 2024

Very Interesting. Thanks!

ronjor · Oct 16, 2024

Not too much to ask of software makers.

Log in or Sign up

CISA and FBI Release Joint Guidance on Product Security Bad Practices for Public Comment

ronjor Global Moderator

Triple Helix Specialist

ronjor Global Moderator

Log in or Sign up

CISA and FBI Release Joint Guidance on Product Security Bad Practices for Public Comment

ronjor Global Moderator

Triple Helix Specialist

ronjor Global Moderator

Useful Searches