How do teams evidence Secure by Design?
Answered
Secure by Design is not itself an assurance process, but delivery teams should complete a self-assessment as evidence they are meeting the principles. Continuous assurance of security controls is still required throughout the service life.
From the guidance
Primary (how) About Secure by Design
While Secure by Design is not an assurance process, one of its principles is to continuously deliver effective security controls throughout the life of a service. Delivery teams should complete a self assessment as evidence they’re meeting the Secure by Design principles.
Section: How organisations show they’re implementing Secure by Design
Related questions
- How should commercial teams apply Secure by Design when buying AI? Buying and building
- Is Secure by Design mandatory for government AI services? Security and safe use of tools
- What is continuous assurance under Secure by Design?
- What does Secure by Design expect for detect and respond? Security and safe use of tools
- Who should own cyber security risk for an AI service under Secure by Design?