NRC Issues Recommendations for Better Network, Software Security

The Network Resilience Coalition (NRC) released a whitepaper urging vendors to improve network and software resilience by adopting secure-by-design/default practices, mapping to NIST’s SSDF, issuing security patches separately from feature updates, providing SBOMs, and standardizing end-of-life disclosures via OASIS OpenEoX. Endorsed by CISA leadership and aligned with U.S. policy (Executive Order 14208, the National Cybersecurity Strategy, and CISA’s Security-by-Design guidance), the report emphasizes urgent adoption to reduce exploitation of unpatched or misconfigured products and anticipates many recommendations may become regulatory requirements.