欧盟网络安全局（ENISA）：2026年设计与默认安全手册（英文版）

Modern products with digital elements are increasingly expected to be secure by design and secure by default. However, many organisations – in particular small and medium-sized enterprises, in which development teams are small and security expertise can be limited – may face distinct challenges in applying these concepts consistently, requiring targeted solutions. This report puts forward a set of principles and tangible guidance on the application of secure by design and default requirements