What are the goals of product cybersecurity?

Protect the product user, the customer and the company; protect the confidentiality, integrity and availability of customer data; ensure product safety, reliability and data protection; comply with laws and regulations; and fulfil market and customer requirements.

The goals widen the classic CIA triad in two directions:

• Who is protected. Not only the data but the user (a patient on an insulin pump), the customer (the hospital running it) and the manufacturer itself (reputation, liability, recalls).
• What is at stake. Beyond CIA of customer data, product security also serves safety and reliability. A manipulated device can hurt someone, so security becomes a precondition for safety.

The last two goals are the business case. Compliance with laws decides market access. Market and customer requirements decide whether the product wins tenders.