NSO follows the Cisco Secure Development Lifecycle (CSDL) process. We are of course continuously working to improve our security posture.
This is an external forum, but since I can see that you are a Cisco employee you can find detailed information in the Cisco-internal security insights system.