The tech industry is known for its lack of transparency when it comes to security, but that could be changing with the new Secure by Design pledge overseen by the Cybersecurity and Infrastructure Security agency.
Jim Richberg, head of cyber policy at Fortinet Inc., believes this pledge is a non-regulatory solution that shifts responsibility from users to manufacturers. He and Suzanne Spaulding, former Undersecretary at the Department of Homeland Security, discussed the pledge and the evolution of cybersecurity at the RSA Conference.
Spaulding emphasized the importance of disclosing vulnerabilities to protect customers and enhance marketplace understanding. Richberg added that addressing vulnerabilities from the start is not only the right thing to do, but also more efficient.
The Secure by Design pledge sets a standard for cybersecurity and transparency, allowing CISA to report which companies are following it. This shift aims to create a “secure-to-market” mindset in the industry, prioritizing security over speed to market.
By knowing which companies are transparent about their cybersecurity, customers can make more informed decisions. The goal is to create a safer network system and set best practices for development operations.
To learn more about the Secure by Design pledge and the discussion at the RSA Conference, check out the video interview here: https://www.youtube.com/watch?v=2Mo7TKn9tso
(*Disclosure: Fortinet Inc. sponsored this segment of theCUBE. Neither Fortinet nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)