{"type":"PublicationIssue","periodical":"DigiNepal Magazine","url":"https://diginpl.com/magazine/2026-11-secure-by-design","number":2,"month":"2026-11-01","title":"Secure by Design","dek":"What Black October 2026 taught the world — and the discipline Nepal cannot skip.","language":"en","cover":{"person":"","role":"","profile":null,"image":null,"lines":["WE UPGRADED THE TECHNOLOGY.","DID WE UPGRADE THE SECURITY?"]},"published":"2026-10-23T09:08:33Z","modified":"2026-10-23T09:08:33Z","editor_note":"October 2026 delivered one of the most alarming stretches in recent cybersecurity memory — from critical PHP and Node.js flaws to supply-chain compromises, cloud breaches and a certificate-authority crisis. Our founder reflects on what it means for everyone building the digital future, and why Nepal cannot skip the discipline of building secure by design.","articles":[{"url":"https://diginpl.com/magazine/2026-11-secure-by-design/we-upgraded-the-technology-did-we-upgrade-the-security","kind":"Feature","title":"We Upgraded the Technology. Did We Upgrade the Security?","dek":"What Black October 2026 taught the world about building — and the discipline Nepal cannot skip.","author":"Padam Sundar Kafle","words":1527,"reading_minutes":7,"takeaways":["Security by design, not as an afterthought — build it into architecture, code, deployment and operations from day one.","Modernise before old systems become liabilities: stay supported, patch promptly, know your dependencies.","Adopt Zero Trust — verify identities, enforce least privilege, limit the blast radius of any compromised credential.","Secure the software supply chain: review third-party components, protect CI/CD, verify releases, manage secrets.","Build resilience, not just defences — monitoring, tested backups, rehearsed incident response and recovery.","Make cybersecurity a leadership responsibility, with budget, accountability, policy and a security-aware culture."]},{"url":"https://diginpl.com/magazine/2026-11-secure-by-design/secinv-you-cannot-protect-what-you-cannot-see","kind":"Feature","title":"SecInv: You Cannot Protect What You Cannot See","dek":"Inside SecInv — the agent-based security and management console built to give an organisation real-time, verifiable control of every device on its network.","author":"Padam Sundar Kafle","words":750,"reading_minutes":4,"takeaways":["Agent-based endpoint management: each device enrolls with a client certificate and talks to the console only over mutual TLS.","Continuous inventory of hardware, OS, network and installed software — so “which machines are affected?” is a query, not a week of phone calls.","Security posture / compliance checks per device, surfaced live.","Signed commands (inventory refresh, reboot, scripts, remote session, screen view) that an agent can cryptographically verify came from the console.","Multi-tenant by entity with role-based access — viewers see, admins act; each facility sees only its own fleet.","Secure by design: identity proven, commands signed, access scoped, inventory continuous — not bolted on after a breach."]}],"citation":"“: Secure by Design.” DigiNepal Magazine, no. 2, November 2026. https://diginpl.com/magazine/2026-11-secure-by-design","licence_note":"Text © DigiNepal Magazine; quote with a link to the article URL. Photos: see each credit."}