Episode 164: Secure by Design in Software Development

In Episode 164 of Cybersecurity Where You Are, Tony Sager sits down with Curt Dukes (https://www.linkedin.com/in/curtis-dukes-aa9966129) , EVP and General Manager of Security Best Practices at the Center for Internet Security® (CIS®), and Steve Lipner (https://www.linkedin.com/in/steve-lipner) , Executive Director of SAFECode.org (https://safecode.org/) . Together, they explore the evolution of secure software development and why secure by design is critical for reducing risk in today’s complex environments.
Here are some highlights from our episode:

• 01:08. Introductions to Curt and Steve
• 04.01. The historical challenge of implementation errors in software security
• 08:41. The emergence of secure by design and the need to measure against specified criteria
• 14:39. The value of artifacts as evidence of secure software development
• 28:52: How the CIS Critical Security Controls® (CIS Controls®) support secure software
• 39:59. The use of community projects to address challenges like secure by design

Resources

• Secure by Design: A Guide to Assessing Software Security Practices (https://www.cisecurity.org/insights/white-papers/secure-by-design?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_164-wistia-controls_dl)
• How Secure by Design Helps Developers Build Secure Software (https://www.cisecurity.org/insights/blog/how-secure-by-design-helps-developers-build-secure-software?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_164-wistia-blog_post)
• CIS, SAFECode Launch Secure by Design Guide to Help Developers Meet National Software Security Expectations (https://www.cisecurity.org/about-us/media/press-release/cis-and-safecode-launch-secure-by-design-guide?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_164-wistia-lp_view)
• Episode 107: Continuous Improvement via Secure by Design (https://www.cisecurity.org/insights/podcast/episode-107-continuous-improvement-via-secure-by-design?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_164-wistia-podcast_sub)
• Secure by Design (https://www.cisa.gov/securebydesign)
• Secure Software Development Framework (https://csrc.nist.gov/projects/ssdf)
• Episode 63: Building Capability and Integration with SBOMs (https://www.cisecurity.org/insights/podcast/episode-63-building-capability-and-integration-with-sboms?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_164-wistia-podcast_sub)

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org (mailto:podcast@cisecurity.org) .

Видео Episode 164: Secure by Design in Software Development канала CIS