In Episode 164 of Cybersecurity Where You Are, Tony Sager sits down with <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/in/curtis-dukes-aa9966129">Curt Dukes</a>, EVP and General Manager of Security Best Practices at the Center for Internet Security® (CIS®), and <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/in/steve-lipner">Steve Lipner</a>, Executive Director of <a rel="noreferrer noopener" target="_blank" href="https://safecode.org/">SAFECode.org</a>. Together, they explore the evolution of secure software development and why secure by design is critical for reducing risk in today’s complex environments.Here are some highlights from our episode:<ul><li>01:08. Introductions to Curt and Steve</li><li>04.01. The historical challenge of implementation errors in software security</li><li>08:41. The emergence of secure by design and the need to measure against specified criteria</li><li>14:39. The value of artifacts as evidence of secure software development</li><li>28:52: How the CIS Critical Security Controls® (CIS Controls®) support secure software</li><li>39:59. The use of community projects to address challenges like secure by design</li></ul>Resources<ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/secure-by-design?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_164-wistia-controls_dl">Secure by Design: A Guide to Assessing Software Security Practices</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/blog/how-secure-by-design-helps-developers-build-secure-software?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_164-wistia-blog_post">How Secure by Design Helps Developers Build Secure Software</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/about-us/media/press-release/cis-and-safecode-launch-secure-by-design-guide?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_164-wistia-lp_view">CIS, SAFECode Launch Secure by Design Guide to Help Developers Meet National Software Security Expectations</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-107-continuous-improvement-via-secure-by-design?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_164-wistia-podcast_sub">Episode 107: Continuous Improvement via Secure by Design</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisa.gov/securebydesign">Secure by Design</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://csrc.nist.gov/projects/ssdf">Secure Software Development Framework</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-63-building-capability-and-integration-with-sboms?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_164-wistia-podcast_sub">Episode 63: Building Capability and Integration with SBOMs</a></li></ul>If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing&nbsp;<a rel="noreferrer noopener" target="_blank" href="mailto:podcast@cisecurity.org">podcast@cisecurity.org</a>.

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Episode 164: Secure by Design in Software Development

Cybersecurity Where You Are (video)

AI Chapters

AI Insights

Reviews