CISA released new voluntary cybersecurity performance goals for the IT and product design sector. These IT Sector-Specific Goals (SSGs) are aligned with Secure by Design principles and will help to protect from cyber incidents, identify and address vulnerabilities prior to product release, improve incident response, and significantly improve software security.
While specific to the IT sector, the goals provide software and product developers in all critical infrastructure sectors with minimum foundational practices upon which they should focus their efforts.