Three senior advisors from CISA discuss the importance of secure software code and explore the ongoing research and open questions for establishing a secure-by-design standard. They delve into the concept of secure-by-design, the lack of security training in top schools, and the importance of field tests. The application of principles, gaps in knowledge, measuring security, and the need for data are also discussed.