Skip to main content
  1. Blog
  2. Stephanie Domas
Stephanie Domas

Stephanie Domas

9 posts

CISO

Stephanie is currently the Chief Information Security Officer (CISO) at Canonical, the creators of the world's most popular Linux operating system, Ubuntu.

Stephanie Domas
14 November 2025

A CISO’s preview of open source and cybersecurity trends in 2026 and beyond

Ubuntu Ubuntu tech blog

Where is open source going next? What’s in store for open source in the coming years, particularly in relation to security? Here’s a CISO’s reflection on the state of open source, and the trends that you can expect to have an impact going into 2026.  ...

Stephanie Domas
24 September 2025

Beyond ‘whack-a-mole’ and insecticide

Ubuntu Ubuntu tech blog

Designing a new, robust, sustainable, and truly holistic approach to cybersecurity Talk to any cybersecurity expert or IT security manager, and they’ll tell you they’re sick of alerts and issues. For a while now, the industry has slowly been realizing that there’s a better way to improve cybersecurity and resolve security issues in IT wit ...

Stephanie Domas
11 August 2025

A CISO’s guide to Application Security best practices 

Hardening Ubuntu tech blog

Effective AppSec is not a one-time fix but a continuous journey across every facet of your application’s lifecycle. By embracing a Secure Software Development Lifecycle (SSDLC) from the outset, diligently uncovering potential risks, and mastering your cybersecurity fundamentals, you lay a robust foundation for resilient applications. ...

Stephanie Domas
7 May 2025

CRA compliance: Things IoT manufacturers can no longer do under the CRA (and what to do instead)

Compliance Ubuntu tech blog

In this blog, I’ll give you a thorough overview of common IoT manufacturer and PDE developer practices that need immediate attention, and how to change or improve these practices so that you can pass CRA compliance. ...

Stephanie Domas
29 April 2025

Extra Factor Authentication: how to create zero trust IAM with third-party IdPs

Security Ubuntu tech blog

In this article, I’ll explore an original and robust method for using third-party IdPs that allows you to maintain a zero trust security posture, thanks to Extra Factor Authentication. Find it on our Charm hub! ...

Stephanie Domas
24 March 2025

What is Application Security (AppSec)?

Hardening Ubuntu tech blog

Application security (or AppSec, for short) is a broad term that refers to all of the tools, actions, and processes that an organization uses to protect its applications against vulnerabilities across the entirety of its life cycle. Application security has one objective: to find weaknesses in your applications and systems that could be a ...

Stephanie Domas
6 February 2025

EU Cyber Resilience Act compliance: best practices for IoT manufacturers

Compliance Ubuntu tech blog

The EU Cyber Resilience Act has considerable repercussions for the IoT device manufacturers. In this blog, we explore these new regulatory requirements and give our blueprint for compliant, market-ready devices. ...

Stephanie Domas
6 February 2025

A CISO’s comprehensive breakdown of the EU’s Cyber Resilience Act (EU CRA)

Compliance Ubuntu tech blog

The CRA is coming, and you need to be prepared. Depending on the Class your product falls into, there could be additional assessment, security, documentation, patching, compliance and reporting requirements on you and your teams. Find out how your digital product or service is categorised, reexamine your cybersecurity practices and design ...

Stephanie Domas
13 August 2024

The Cyber Resilience Act: What it means for open source

Compliance Ubuntu tech blog

Canonical CISO Stephanie Domas outlines the community response to the EU Cyber Resilience Act and explores how it will affect enterprises using open source software. ...