Cyber Security and the DPG Standard

[prajectory]

In order for DPGs to have robust "security by design", the DPGA has commissioned expert dialogues and community inputs to implement cyber security tenets in the design stage of the DPG.

There are 3 parts to this:

1. How to retrofit the standard to meet the basic principles of cyber security by design?
2. How to think through risk mitigation through robust documentation and audits?
3. Guiding principles and best practices for product owners to deploy in the designing process of DPGs

[jstclair2019]

Has this expert panel been convened? Happy to add a couple things:

1. We're still working on the Security Architecture guidance for OpenHIE, so there may be parallels
2. Specific to Open Source Software Security, the OpenSSF has significant efforts for tooling and training, including free developer courses
3. The US is pushing for the use of Software Bills of Materials across all industries and should be considered for the DPG Standard.