As many teams navigate the evolving regulatory landscape across Europe (and beyond) affecting the supply chain, the mandate for “Secure-by-Design” has evolved from a best practice into an essential feature to ensure that digital products are secure and resilient.
While the principles of secure-by-design are widely understood, the operational reality of enforcing, verifying, and maintaining these postures at scale across the supply chain remains a significant hurdle.
This talk explores the critical gap between conceptual security design and measurable outcomes. It proposes a move from static documentation to capturing security decisions in machine-readable formats in order to support regulatory compliance and monitor supply chain resilience. It will also demonstrate how open-source projects and standards can provide the necessary infrastructure to implement these requirements.
Secure-by-design is a fundamental shift in product security, embedding protective measures throughout the development lifecycle. Whilst there are various approaches that can be used to perform secure-by design, capturing the evidence is often difficult. Traditional documentation is often difficiult to interpret, hard to maintain and often falls to capture the current ‘as delivered’ .product
This talk proposes an approach which can be easily adopted by product manufacturers who need to capture the evidence in a form which allow for ease of managementt, assessment and maintenance and will allow teams to be more proactive at ensuring their products stay secure and resilient.
Conference partners
Organiser
