Building safer foundations for digital systems

Make the decision

Business & Policy

Examine adoption costs, lifecycle benefits, policy context and assurance with assumptions made explicit.

Explore this section

Choose a page

  1. 01 · Business & Policy Digital sovereignty Digital sovereignty is the ability to make informed, durable choices about critical technology, suppliers, skills and data. Read this page
  2. 02 · Business & Policy Product-lifecycle benefits CHERI can influence costs and risk across design, testing, incident response, maintenance and product retirement—not only block an invalid access at runtime. Read this page
  3. 03 · Business & Policy Semiconductor strategy Semiconductor strategy connects secure processor capabilities with domestic or allied design capacity, software ecosystems, manufacturing access, skills and market demand. Read this page
  4. 04 · Business & Policy CHERI adoption costs CHERI adoption costs arise across silicon or board selection, toolchains, software porting, testing, skills, assurance and the period in which old and new platforms coexist. Read this page
  5. 05 · Business & Policy Standards Standards turn shared technical intent into interoperable expectations for architectures, software interfaces, system integration, testing and product claims. Read this page
  6. 06 · Business & Policy Cost of patching and maintenance Patching is essential, but every update consumes engineering, testing, deployment and support capacity—and can create new compatibility and assurance work. Read this page
  7. 07 · Business & Policy Rewrite costs and risks Replacing memory-unsafe code with a memory-safe language can prevent broad classes of defects, but a full rewrite carries delivery, compatibility and regression risk. Read this page
  8. 08 · Business & Policy Assurance and certification Assurance is the structured argument and evidence that a system meets defined security properties. Read this page
  9. 09 · Business & Policy Cost of memory unsafety Memory-safety failures create investigation, response, downtime, update, assurance and support costs that can continue long after the original defect is fixed. Read this page
  10. 10 · Business & Policy Cybersecurity regulation Cybersecurity regulation commonly asks organisations to manage risk across secure design, vulnerability handling, updates, supply chains and incident response. Read this page
  11. 11 · Business & Policy Total cost of ownership Total cost of ownership compares all material costs over the decision horizon: acquisition, integration, operation, support, change and retirement. Read this page
  12. 12 · Business & Policy National resilience National resilience depends on essential digital systems continuing to operate, degrading safely and recovering under stress. Read this page
  13. 13 · Business & Policy Government guidance Government guidance helps organisations interpret secure-by-design expectations, assess emerging technology and align investment with national priorities. Read this page
  14. 14 · Business & Policy Case studies A useful CHERI case study explains a real system boundary, the baseline architecture, the change made, the evidence collected and the limitations of the result. Read this page
  15. 15 · Business & Policy Policy briefings A policy briefing gives a decision-maker the shortest defensible route from problem to choice. Read this page
  16. 16 · Business & Policy Critical infrastructure Critical-infrastructure systems combine long service lives, demanding availability, mixed-trust components and constrained maintenance. Read this page
  17. 17 · Business & Policy Current and emerging legislation Product-security, resilience, safety and sector rules increasingly place lifecycle obligations on manufacturers and service providers. Read this page
  18. 18 · Business & Policy Business-case toolkit A CHERI business case compares the cost and risk of continuing the current architecture with the cost, benefit and uncertainty of a staged transition. Read this page
  19. 20 · Business & Policy Return on security investment Return on security investment compares expected risk reduction and operational benefit with the full cost of a control. Read this page
  20. 21 · Business & Policy Procurement Procurement can turn secure-by-design intent into demand by asking suppliers for measurable properties, implementation evidence and lifecycle commitments. Read this page