Secure by Design: Building cybersecurity into the foundation

Secure by Design is presented as a foundational software development philosophy that embeds security across design, coding, testing, deployment, and maintenance. The document outlines core principles (least privilege, secure defaults, defense-in-depth), explains why vendors must shoulder security responsibility, cites past high-profile vulnerabilities as rationale, and describes Sophos’ public commitment to CISA’s Secure by Design framework and product improvements (including Sophos Firewall v22 enhancements).