This article discusses the challenges enterprises face in applying the Secure by Design guidelines from CISA. It highlights a lack of consensus on implementation and the need for benchmarks and standards to improve software security. Insights from interviews with security leaders reveal common obstacles and the role of AI in addressing these issues.