Comment by livealight

This exact same sentiment came through in the National Cyber Security Strategy the US released. It describes a minimum acceptable level of software development, called safe harbours, based on e.g. the NIST Secure Development Standards.

Whether we like it or not, it seems legislation is forming on how to code and ship software.

https://www.whitehouse.gov/briefing-room/statements-releases...