News and Analysis

Software companies must change their development practices to counter supply chain breaches, say experts. The Secure by Design concept, proposed by the federal Cybersecurity and Infrastructure Security Agency, stipulates that software security be built into every step of the development process. The approach emphasizes security education for developers, thorough testing and detection procedures, and security guardrails. However, applying the Secure by Design principles is challenging due to enduring patterns of traditional software development.