With the rise of cyber attacks that have affected critical infrastructure as well as resulted in massive data breaches of US citizen's personal data, the White House, via Executive Order, has issued the National Cybersecurity Strategy (March 2023). The purpose of this document is to provide an outline for how all government agencies, and private industries that work with these government agencies, need to approach cybersecurity. As you will read, this strategy addresses software security in a few areas. For this discussion, you will get familiar with these sections and the requirements put forth, and discuss their merits.

 

Instructions

In the March 2023 National Cybersecurity Strategy (attached below), read sections:

• Collectively Defend Federal Civilian Agencies (page 17)
• Strategic Objective 3.3: Shift Liability for Insecure Software Products and Services (page 20, 21)

After reading these sections, review the NIST Secure Software Development Framework (attached below) to familiarize yourself with the specific guidelines.

 

Using the discussion board, create an original post answering the following questions:

 

How do you think this guidance will affect how organizations approach application security? Also, what specific guidelines do you think will be the most difficult to implement? 

 
 

Respond to one of your classmates original posts with thoughts or feedback on their answers.

REMEMBER: Responses should be professional and add to the conversation. Responses like "I agree" or "I liked your post" won't be counted. Try to add something original to the conversation or ask questions about their opinions.
 

 

Grading

You will be graded on:

Your ability to write insightful, original content that demonstrates an understanding of the topic in a well-written and professional manner.

 

Tips:

Do not just copy and paste content from the internet - You are encouraged to use resources from the internet to support your opinion, but do not let your internet content be your ONLY content!

Site the resources that you use - I am not that concerned with whether you use MLA or APA formatting to site your content, but at least take any content that you are copying and pasting, put quotes around it, and add a link to the resource at the bottom of your post.

Spelling and grammar are important - Make sure you write in complete sentences, spell things correctly, and use proper sentence structure and grammar. If this means that you need to write your post in Microsoft Word or Pages where you can ensure that you don't have any red or blue squiggles (which highlight spelling and grammar mistakes) in your post, then do that!

 Use professional language - It is great to use passionate language to convey your opinions, but do it in a professional fashion (ie. like you are talking to boss). Please refrain from using the language that you would use when talking to your friends at the local pub.