The UK’s National Cyber Security Centre (NCSC) has joined with its counterparts in Australia, Canada, Germany, the Netherlands, New Zealand and the US to launch a guide containing advice to help technology manufacturers keep customers safe by embedding secure-by-design and secure-by-default principles into their products during the development phase. Titled ‘Shifting the balance of cyber security risk: principles and approaches for security-by-design and-default’, the guide is available to download via the US Cybersecurity and Infrastructure Security Agency (CISA). The group said that devices and products where security has been treated as an additional technical feature, or where users need to make potentially complex configuration changes to keep themselves safe after purchase, leave people needlessly exposed to security risks and potentially cyber-attacks.
Read more here