 |
Cybersecurity Where You Are (video)Author: Center for Internet Security Language: en-us Genres: Business, Non-Profit, Technology Contact email: Get it Feed URL: Get it iTunes ID: Get it |
Listen Now...
Episode 205: Secure by Design — Now Updated for AI
Episode 205
Wednesday, 16 September, 2026
In episode 205 of Cybersecurity Where You Are, Tony Sager speaks with Phyllis Lee, VP of SBP Content Development at the Center for Internet Security®(CIS®), and Steve Lipner, Executive Director of SAFECode. Together, they discuss how an updated document from CIS and SAFECode gives concrete guidance on what artificial intelligence (AI) means for your Secure by Design process.Here are some highlights from our episode:02:17. A refresher on making Secure by Design digestible for end organizations02:57. Distillation and prescriptive guidance: The value provided by CIS06:53. An overview of Butler Lampson's "Gold Standard of Security"07:03. How a shift in approach to Secure by Design led to the founding of SAFECode09:42. The importance of verification requirements for what developers have done12:54. A product of CIS pragmatism: Prioritization relative to the development environment20:06. Artifacts as evidence of secure software development at work30:15. How the updated document provides guidance around AI30:45. What AI creates instead of new classes of vulnerabilitiesResourcesCIS Critical Security Controls® (CIS Controls®)Secure by DesignSecure by Design v1.1 A Guide to Assessing Software Security PracticesTurning Secure Software Development into a Measurable PracticeCIS and SAFECode Release Secure by Design v1.1: A Guide to Assessing Software Security PracticesEpisode 164: Secure by Design in Software DevelopmentCIS Critical Security Control 16: Application Software SecurityGuide to Implementation Groups (IG): CIS Critical Security Controls v8.1Episode 200: Alan Paller's Vision and Our Next ChapterFrom Prompts to Protocols: The Security Blueprint for Enterprise AIMythos AI: What Actually Matters for Cybersecurity LeadersIf you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.
