High Assurance Principles

NCSC has today published it design guidelines for High Assurance products.

https://www.ncsc.gov.uk/guidance/design-guidelines-for-high-assurance-products

I would suggest our joint definition of High Assurance from 2016 has stood the test of time reasonably well (?)

Short version: "High assurance cyber security, means that risks and liabilities can be managed with ongoing high confidence based on strong and verifiable evidence"