Security by Design and Default is a core requirement for manufacturers developing products with digital elements under the Cyber Resilience Act. Yet for SMEs, translating these principles into everyday engineering practice remains a persistent challenge. ENISA’s newly published draft Security by Design and Default Playbook addresses this gap head-on, offering actionable guidance tailored to organisations with limited time, budgets, and specialist capacity.

This DIGITAL SME ISAC Masterclass gives you a hands-on look at the playbook which has been built specifically around the constraints SMEs face: limited budgets, small teams, and no dedicated cyber security staff. The playbook translates 22 security principles into actionable checklists, release gates, and evidence criteria that developers can apply immediately across their product lifecycle.

In this session, ENISA cybersecurity expert Yonas Leguesse will walk through the playbook’s key concepts and how to put them into practice. The second half of the Masterclass is an open feedback session where SME representatives can ask questions, raise implementation challenges, and feed directly into ENISA’s ongoing work.