Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Presentation

Secure by Design: A Guide to Assessing Software Security Practices

May 20, 2026

Presenters

Curt Dukes - Center for Internet Security (CIS)

Phyllis Lee - Center for Internet Security (CIS)


Description

An overview of the Secure by Design guide which builds on the NIST Secure Software Development Framework (SSDF) to provide role-based implementation guidance, artifact-driven verification methods, and risk-based evaluation strategies, in conversation with an evolving landscape of Secure by Design initiatives from a variety of organizations.

Downloads

Created June 03, 2026, Updated June 11, 2026