[ Thanks to LogError for this link.
]
“Thankfully these days’ assessing the security of an application
prior to implementation is a normal process for most organisations.
Organisations accept the view that the earlier in the
implementation cycle that security issues are identified, the
greater the return on investment (ROI). However with such a mature
attitude to implementation, it is hard to understand why
organisations are not applying the same principals to the software
development cycle as a whole. In fact currently there are only a
limited few that are following best practice recommendations in
regard to secure development and reaping the financial rewards that
increased development controls bring…”