Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Presentation

Secure by Design: A Guide to Assessing Software Security Practices

May 20, 2026

Presenters

Curt Dukes - Center for Internet Security (CIS)
Phyllis Lee - Center for Internet Security (CIS)

Description

An overview of the Secure by Design guide which builds on the NIST Secure Software Development Framework (SSDF) to provide role-based implementation guidance, artifact-driven verification methods, and risk-based evaluation strategies, in conversation with an evolving landscape of Secure by Design initiatives from a variety of organizations.

Presented at

May 2026 Software and Supply Chain Assurance (SSCA) Forum

Downloads

Created September 30, 2026