HISC 2024 Programme

Software is pervasive, to the extent that modern society is now critically dependent on it, in myriad ways. Likewise, defence is now critically dependent on software, to provide the capabilities required by our armed forces and to deliver a leading edge over potential adversaries. The Global Combat Air Programme (GCAP) is an obvious example of this phenomenon. To successfully deliver GCAP, a vast volume of software, including a significant amount of high-integrity software, and the associated Complex Electronic Hardware (CEH), needs to be delivered against a compressed timescale, within a large-scale, international, complex engineering programme. This presents a number of significant challenges. Taking a "features, not bugs" approach, these challenges are viewed as opportunities, to improve our approach to software within GCAP and more widely.

As the cybersecurity landscape evolves, the concepts of “cyber security”, secure by default", and "secure by design" are increasingly used interchangeably, creating ambiguity in implementation and policy. This talk aims to clarify these terms and review government approaches and the language changes that are shaping the future of cybersecurity. By shifting liability and responsibility earlier in the supply chain, governments and organisations are working to ensure robust security measures are embedded from the outset.

We will explore how these shifts have been reflected in National Government Strategies, with insights into collaborative statements and road mapping from CISA and other partner countries. The discussion will highlight the importance of embedding security measures in fostering stronger supply chain resilience and outline practical steps for engaging with supply chains on security matters.