Secure by demand: Top 5 actions to improve security from your software vendors
Synopsis
The presentation will start by introducing and summarising key elements behind the 'secure by default' principle.
As the customer, relying solely on vendors to improve security in their software products will take time and not realising the best and much needed security outcome today.
In addition, current supply chain security practice is misguided by enterprise security assessment that is not the same as product security assessment.
Secure by demand is part of the answer that some customer vigilantism - powerful, specific and coordinated demand can yield a much better security outcome.
The next part of the presentation goes through the top 5 secure by demand actions that a software purchasing customer can take. These 5 actions are summarised from 1st hand and peer supported experiences with tangible benefits and case studies. Many are aligned with what a 'secure by default' practising vendor needs to demonstrate so vendors would ordinarily expect such demand.
The 5 actions are:
The presentation will elaborate on the details behind each actions - what, why, how to and expected outcomes.