Cybersecurity Dive November 20, 2023
The focus should be on what manufacturers are doing to keep their customers safe, not the damage attackers might be inflicting, CISA’s Bob Lord said.
The Cybersecurity and Infrastructure Security Agency wants receipts from all parties involved far and wide as it advances on its quest to push the responsibility for security to manufacturers and vendors instead of customers.
Following CISA’s revised guidance urging technology companies to prove they are incorporating security into their products with detailed data and logs, Bob Lord, senior technical advisor at CISA, explained how these responsibilities fall on various hardware and software stakeholders in a Thursday blog post.
“The security of consumer and enterprise products are not acts of fate. Security is the result of...