الثقة والامتثال

CISA Secure by Design Pledge

This is a voluntary pledge focused on enterprise software products and services, including on-premises software, cloud services, and software as a service (SaaS). By participating in the pledge, software manufacturers are pledging to make a good-faith effort to work towards program-specific goals listed below over the following year. In the spirit of radical transparency, the manufacturer is encouraged to publicly document their approach so that others can learn.

The pledge is structured with seven goals. Each goal has the core criteria that manufacturers are pledging to work towards, in addition to context and example approaches to achieve the goal and demonstrate measurable progress. Demonstrating measurable progress across the manufacturer’s products can take a variety of forms — such as by taking action on all the manufacturer’s products, or by choosing a set of products to first address and publishing a roadmap for other products.