CISA's Secure by Design Initiative at 1: A Report Card

CISA's Secure by Design initiative celebrated its first anniversary and the commentary grades its progress: Raising Awareness (A), Practical Action (B-), Attention to Detail (C), Future Vision (B+), and an overall B+. The piece highlights clear successes in raising awareness and embedding secure design into federal procurement, notes shortcomings in practical threat-modeling guidance, and emphasizes that legislative liability for software manufacturers would be the decisive change needed to shift security responsibility from users to producers.