Application Security for Management, Project Managers, and Architects

Although Web application security is gradually improving, many project leaders, vendors, and programmers are still unaware of vulnerabilities that can expose confidential institutional data, allow loss of data, or loss of data quality. Integrating security into the Software Development Life Cycle (SDLC) often requires additional training, a review of existing practices, and can require an organizational change. A department-wide focus, where every individual participating in software development or acquisition assumes a collective effort and responsibility to deploy and sustain secured web applications is required. To be most effective, it is best sponsored at the management level.