Topic

Policy & Compliance

In-depth guides and analysis on policy & compliance from the Safeguard engineering team.

3 articles

Executive Order 14028, Three Years Later: Progress, Gaps, and What Comes Next

Three years after the landmark cybersecurity executive order, SBOM adoption is growing but uneven, secure development attestation is rolling out, and the gap between policy and practice remains wide.

May 12, 20245 min read

Policy & Compliance

CISA's Secure by Design Pledge: Voluntary Commitments with Real Teeth

CISA launched a voluntary pledge asking software manufacturers to commit to specific security improvements. Over 100 companies signed. Here is what the pledge actually requires and whether it matters.

Apr 10, 20246 min read

Policy & Compliance

Software Liability in 2024: The Shift From Caveat Emptor to Vendor Accountability

Governments worldwide are moving to hold software vendors liable for security failures. Here is what the shifting liability landscape means for software producers and consumers.

Mar 5, 20245 min read