12 new national NIS2 framework versions published! Read more ->
Cyberday back to normal - related blog
Apply secure design principles in application architectures. Secure design principles include the
concept of least privilege and enforcing mediation to validate every operation that the user makes,
promoting the concept of “never trust user input.” Examples include ensuring that explicit error
checking is performed and documented for all input, including for size, data type, and acceptable
ranges or formats. Secure design also means minimizing the application infrastructure attack surface,
such as turning off unprotected ports and services, removing unnecessary programs and files, and
renaming or removing default accounts.
The general rules for secure development work have been drawn up and approved by the development managers. The implementation of the rules is monitored in software development in the organization and the rules are reviewed at least yearly.
The safe development policy may include e.g. the following things:
Compliance with the rules of secure development may also be required of key partners.
The organization must create procedures that by default cyber security and security requirements are considered from the start when developing and designing new systems, digital services or business processes.
This is called the principle of built-in and default security (security by design). As a result of this approach, the design documentation should clearly indicate what measures are taken to ensure cyber security.
.png)
