The phrase secure by design appears in almost every defence-adjacent capability statement written this decade. Buyers have stopped treating it as a claim and started treating it as noise. That is a fair response. The phrase is easy to say, easy to write into a submission and almost impossible to distinguish from its inverse when it stands alone.
The way through is to state what the phrase means in operational terms, and then produce the evidence that proves the operation is real.
The five operational tests
There are five operational tests a defence buyer applies to the phrase, whether they say so at the assessment table or not.
- Is the threat model current, and is it named? A response that talks about robust security without naming a threat model is not talking about security. It is talking about intent. The threat models in current UK defence practice are known and can be named. The response should name the one it is built against.
- Is the classification decision made before the tool is chosen? Secure by design fails at the first moment a general-purpose AI tool is asked to touch classified material because the buyer chose the tool before they classified the work. The evidence trail for this is trivial to produce. The intake stage should show the classification set before any document reaches an agent.
- Is redaction default-on, and is the record exportable? Redaction that is opt-in is redaction that fails at the first deadline pressure. Redaction that is default-on, with an exportable record showing what was redacted and by whom, is redaction that can be tested by an assessor.
- Are the people cleared to the right level, and is the record current? The response should not simply state that key people are cleared. It should state the currency of that clearance and the mechanism the firm uses to prevent an expired clearance from reaching a submission.
- Is the supply chain in scope, and is the same standard applied? The response should show that every subcontractor named in the delivery plan holds evidence of the same standard as the prime, in the same evidence library, refreshed on the same cadence.
Why the tests are hard to pass
None of these tests requires new capability. Every one of them requires operational discipline that most bid processes cannot demonstrate. The firms that can demonstrate them win the work that the firms who cannot demonstrate them do not.
The governed advantage on defence work is not the phrase. It is the operational spine that can produce the evidence for each of the five tests on demand, in a format an assessor can consume.
Strategist so-what
Claim. Secure by design is only evidence when five named operational tests can be answered on demand.
Implication. Build the spine that answers the five tests once, and every defence submission inherits it rather than rebuilding it under deadline.