Business & Policy
Government guidance
Government guidance helps organisations interpret secure-by-design expectations, assess emerging technology and align investment with national priorities.
Why it matters
For CHERI, guidance can establish why hardware-supported memory safety matters and where evaluation fits, while implementation decisions remain product-specific.
In brief
Government guidance helps organisations interpret secure-by-design expectations, assess emerging technology and align investment with national priorities. It should be read alongside applicable law, sector regulation and the organisation’s own threat model.
Key considerations
1. Authority
Check the issuing body, jurisdiction, intended audience and whether the document is mandatory, recommended or informational.
2. Currency
Record publication and revision dates, subscribe to updates and avoid copying advice into static policy without an owner.
3. Action
Translate guidance into a decision, pilot, procurement criterion or evidence requirement rather than treating acknowledgement as completion.
Evidence and caveats
Guidance can lag technology or assume a different sector and risk level. Document deviations and obtain specialist advice when obligations are unclear.
Show assumptions, ranges, dates and owners for economic or policy claims. Recheck legislation, guidance, product status and prices at the decision date.