NCSC Secure by Design

NCSC Secure by Design supports security being considered throughout the design and delivery lifecycle.

ORSM extends that design perspective into operational survivability.

The additional questions include:

• Is the design recoverable?
• Can critical services continue if a security capability fails?
• Has dependency concentration been understood?
• Is the operational burden sustainable?
• Does the control create avoidable complexity?
• Can responders still operate during disruption?

ORSM therefore complements secure design by testing whether a secure design remains supportable and resilient in operation.