• Security is quality under attack. Hard-won lessons in software security, from someone who built the programs and wrote the standards.

rare risk ignorance

Security training – does it help?

I came across the suggestion to train (nearly) everyone in the organization in security subjects. The idea is very good, we often have this problem that the management has absolutely no knowledge or interest in security and therefore ignores the subject despite the efforts of the security experts in the company. Developers, quality, documentation, product ...

Read More