Relevance of Security by Design for IoT Certification “The IEC 62443-4-1 certification specifies process requirements for the secure development of products, ensuring the highest levels of cybersecurity throughout the whole product and application lifecycle. ” according to Eurotech in IoTWorld Today
Log4J — Apache’s Java-based logging utility, has exposed once again the complexities of securing applications that use open-source code libraries. “SBOMs are a start but they are only a piece of the puzzle,” InformationWeek reports on the need for SBOM.
“Risk management of OSS has NOT kept pace with the OSS usage boom among public and private sectors. And without a risk management strategy, firms don’t have the budget or resources they need and, in hindsight, should have had,” according to Forrester‘s article.
On October 24th, the Flemish Agency for Innovation and Entrepeneurship VLAIO announced the approval for COOCK IIoTSBOM. With participation from the CyberSecurity and Infrastructure Security Agency (CISA) of the US government, LSEC – Leaders In Security, KU Leuven COSIC and Flanders Make have launched the initiative in Flanders to ensure awareness and adoption of the Software…
In an article from November 1st 2021, Bolstering CyberSecurity Risk Management with SBOMs, Forbes magazine reports on the interest and benefits of Software Bill of Materials. In this article Chuck Brooks puts the US Executive Order in perspective and also reports on the Department of Homeland Security (DHS) Software Supply Chain Risk Management Act and…
On May 12th 2021, the US President directed measures fortifying the nation’s CyberSecurity Posture under Sec. 4. Enhancing Software Supply Chain Security by means of SBOMs (Software Bill of Materials). ” There is a pressing need to implement more rigorous and predictable mechanisms for ensuring that products function securely, and as intended. … NIST … shall issue guidance identifying…