We’ve all heard about the increasing importance of cyber security but do you really need it?

A big mistake I’ve seen many projects make is spending too much on cyber security. This means less money for the capability they’re developing. The weapon system doesn’t get the range its users wanted. The ship misses having the weapon system altogether. There are fewer ships in total.

Heard about Secure By Design but unsure how to implement it in your project?

Checkout our free online training events.

Choose a time that suits you.

Want to learn about Secure By Design but short of time?

Download our Quick Reference Guide.

Quickly answer questions like whether you need additional security resource or who signs off security approval

Secure by Design is a key component of how cyber security will be improved within the MOD.

The culture and approach to how cyber security is addressed in capability programmes across MOD is changing. Cyber security is often bolted on at the end of a programme lifecycle after an accreditation process and this does not provide MOD with the best chance of delivering secure capabilities into our operational user’s hands.

Secure by Design demands that thorough preparation for risk management is conducted. Here, cyber security consultants are often asked to identify and list stakeholders. But why should we do this if it isn’t useful? How can a list of people contribute to good risk management? Having a list of interested parties is a great start but through secure by design we want to take this to a more practical level.