The Canadian Centre for Cyber Security has teamed up with the Australian Signals Directorate’s Australian Cyber Security Centre (ACSC), as well as international partners such as the New Zealand National Cyber Security Centre (NCSC-NZ), the UK National Cyber Security Centre (NCSC-UK), and the US Cybersecurity and Infrastructure Security Agency (CISA) to release cybersecurity guidance on acquiring secure digital products or services.
To safeguard user privacy and data from cyber threats, it’s crucial for organizations to ensure they select technologies that are secure and verifiable. When procuring and utilizing digital products or services, organizations bear the responsibility of assessing their suitability, security, and associated risks.
This guidance aims to assist organizations and manufacturers by:
Informing organizations about secure-by-design considerations when acquiring digital products and services.
Helping organizations make informed, risk-based decisions regarding digital products and services.
Informing manufacturers about secure-by-design considerations for digital products and services.
Providing manufacturers with essential security questions and expectations they can anticipate from their customers.
By making informed and secure decisions, organizations can procure more secure products with fewer vulnerabilities, thereby reducing the costs associated with managing product vulnerabilities.
Loading...
Reload document 
Open in new tab Source: Canadian Centre for Cyber Security, Government of Canada
