Five Ways to Increase the Security of Cyber Products and Services, summarizes the 2015 progress of EWI's breakthrough group on Increasing the Global Availability and Use of Secure ICT Products and Services. The report recognizes that government and industry act in multiple roles in the ICT marketplace. The government acts as a policymaker; industry provides ICT products and services; and, both parties buy ICT products and services.
These shared responsibilities include: maintaining an open market that fosters innovation and competition and creates a level playing field for ICT providers; creating procurement practices that utilize fact-driven, risk informed, and transparent requirements based on international standards and approaches; and avoiding requirements or behavior that undermines trust in ICT (e.g., by installing back doors).
The group will continue its work in 2016, creating a handbook that will help inform buyers.