Fortinet, a cybersecurity leader, reaffirmed its commitment to responsible product development and vulnerability disclosure by signing the Secure by Design pledge initiated by CISA.
The pledge aligns with Fortinet’s existing practices, including secure product development lifecycle, robust testing, trusted supplier program, information security standards, and third-party certifications.
Fortinet’s PSIRT team ensures proactive vulnerability disclosure and fixes.
The company also engages in public-private partnerships like the Network Resilience Coalition, Joint Cyber Defense Collaborative, Cyber Threat Alliance, and the World Economic Forum’s Centre for Cybersecurity. Fortinet will discuss responsible radical transparency at RSA Conference 2024 with industry experts.
Fortinet products development
“The dedication to a secure-by-design approach to product development is foundational to strong security. We see vendors like Fortinet leading the way in following and applying these principles globally, principles which are also outlined in Australia’s Essential Eight framework, as a significant step forward in enhancing our collective security,” says Peter Jennings, Director, Strategic Analysis Australia and member of Fortinet’s Strategic Advisory Council.
More quotes
Over and over, across multiple sectors, we have learned that transparency improves outcomes for consumers and society. The cybersecurity industry is no different. In our sector, transparency includes searching for, mitigating, and disclosing vulnerabilities in an open, responsible manner. Fortinet has already taken steps to embrace such responsible transparency, creating a clear set of principles for handling vulnerability communication and analysis. The company’s leadership in this area is a strong example of how cybersecurity vendors should be communicating with customers and the broader public,” Says Michael Daniels, President and CEO of the Cyber Threat Alliance (CTA)
Leave a Reply
You must be logged in to post a comment.