Safe by Default by Kai London
Customers and regulators increasingly expect products to be secure without users having to configure them. This book shows product, engineering and security teams how to make safe the default — in design, development, configuration and support.
What the book covers
Why defaults matter
How insecure defaults become customers' breaches.
Design principles
Secure-by-design and secure-by-default in practice.
Development practices
Threat modelling, secure coding and testing.
Configuration and updates
Hardened defaults, safe updates and end-of-life planning.
Vulnerability handling
Receiving, fixing and disclosing vulnerabilities.
Demonstrating it
Evidence for customers and obligations under the Cyber Resilience Act.
This book offers general guidance and is not legal advice. It is independent and carries no endorsement by or affiliation with any regulator or standards body.
Who it is for
Product managers, engineering leaders, product security teams and executives of technology vendors.
About the author
Professor Kai London — CISSP, CISM.
An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.