search

DPGAlliance / DPG-Standard

Digital Public Goods Standard
Creative Commons Attribution Share Alike 4.0 International
104 stars 42 forks source link

Cyber Security and the DPG Standard #105

Open prajectory opened 2 years ago

prajectory commented 2 years ago

In order for DPGs to have robust "security by design", the DPGA has commissioned expert dialogues and community inputs to implement cyber security tenets in the design stage of the DPG.

There are 3 parts to this:

  1. How to retrofit the standard to meet the basic principles of cyber security by design?
  2. How to think through risk mitigation through robust documentation and audits?
  3. Guiding principles and best practices for product owners to deploy in the designing process of DPGs
jstclair2019 commented 1 year ago

Has this expert panel been convened? Happy to add a couple things: 1) We're still working on the Security Architecture guidance for OpenHIE, so there may be parallels 2) Specific to Open Source Software Security, the OpenSSF has significant efforts for tooling and training, including free developer courses 3) The US is pushing for the use of Software Bills of Materials across all industries and should be considered for the DPG Standard.