Secure by Design

Reduce cyber security risk through more secure products

Secure by Design is a proactive approach that embeds cyber security into the design, development and operation of products and services from the outset. Rather than addressing security issues after release, Secure by Design promotes reducing vulnerabilities through better architecture, development practices and ongoing security maintenance. This collection of guidance helps technology manufacturers, business leaders and consumers understand Secure by Design and Secure by Default principles. It includes practical advice, implementation guidance and supporting resources covering secure technology procurement, software deployment, memory safety, Internet of Things (IoT) security, cryptographic key management, secure architecture and cross-domain solutions. Together, these publications support the development, selection and operation of more secure technologies.

Featured publications

Explore guidance to understand quantum impacts and plan how to protect your systems.

Shifting the balance of cyber security risk

Learn how software manufacturers can reduce cyber security risks through secure by design and secure by default practices.

Choosing secure and verifiable technologies

Learn how to select secure and verifiable technologies that reduce cyber risks and help build reliable systems.

IoT Secure by Design guidance for manufacturers

Learn how to design secure Internet of Things products to reduce cyber risk, protect users and build trust in connected devices.

Understand and adopt Secure by Design

Explore foundational principles and practical frameworks for embedding security into technology products and organisational systems.

Secure by Design foundations

Learn the six Secure by Design foundations for building, procuring and maintaining secure digital products and services.

Shifting the balance of cyber security risk

Learn how software manufacturers can reduce cyber security risks through secure by design and secure by default practices.

Modern defensible architecture

Learn how modern defensible architecture helps organisations build resilient, secure and adaptable cyber defences.

Choose and deploy secure technologies

Access guidance to support informed technology procurement and the safe, reliable deployment of software products.

Choosing secure and verifiable technologies: Executive guidance

Executive guidance on choosing secure and verifiable technologies to reduce cyber risk.

Choosing secure and verifiable technologies

Learn how to select secure and verifiable technologies that reduce cyber risks and help build reliable systems.

Safe software deployment: How software manufacturers can ensure reliability for customers

Learn how to release software updates safely by following secure practices to reduce risks, prevent disruptions and build customer trust.

Develop secure software and connected products

Learn how manufacturers can address memory safety risks and apply Secure by Design principles to software and connected products.

The case for memory safe roadmaps

Learn why software manufacturers should adopt memory safe programming languages and publish roadmaps to reduce memory safety vulnerabilities.

Exploring memory safety in critical open source projects

Explore memory safety risks in opensource software and learn how safer coding practices can reduce weaknesses and strengthen overall system security.

IoT Secure by Design guidance for manufacturers

Learn how to design secure Internet of Things products to reduce cyber risk, protect users and build trust in connected devices.

Protect sensitive systems and information

Find guidance for managing keys, secrets, security domains and trust boundaries to protect sensitive systems and information.

Managing cryptographic keys and secrets

Improve cyber security by managing and protecting cryptographic keys and secrets that protect data, control access, and reduce risk.

Cross Domain Solutions

Learn how to plan, analyse, design and build cross domain solutions to securely connect networks, protect sensitive data, and support trusted information sharing.

What are you looking for?

Stay secure

Guidance

Resources

Access publications and alerts

Publications

Alerts, advisories and reports

Recover from a cyber incident

How to recover

Where to get help

Submit a report

Report an issue

Regulatory reporting

What we do

About us

News and programs

Secure by Design

Reduce cyber security risk through more secure products

Featured publications

Shifting the balance of cyber security risk

Choosing secure and verifiable technologies

IoT Secure by Design guidance for manufacturers

Understand and adopt Secure by Design

Secure by Design foundations

Shifting the balance of cyber security risk

Modern defensible architecture

Choose and deploy secure technologies

Choosing secure and verifiable technologies: Executive guidance

Choosing secure and verifiable technologies

Safe software deployment: How software manufacturers can ensure reliability for customers

Develop secure software and connected products

The case for memory safe roadmaps

Exploring memory safety in critical open source projects

IoT Secure by Design guidance for manufacturers

Protect sensitive systems and information

Managing cryptographic keys and secrets

Cross Domain Solutions

Thanks for your feedback!