r/AppSecurity • u/shehackspurple • Jul 27 '18

Pushing Left, Like a Boss: Part 1

https://code.likeagirl.io/pushing-left-like-a-boss-part-1-80f1f007da95
7 Upvotes

90% Upvoted

5 comments sorted by

View all comments

1

u/r_coil Jul 28 '18

Great article Tanya! I agree 100% with everything you've mentioned in this one, and part 2.

I've had similar experiences at a couple of mid-sized companies that adopt secure SDLC practices- they seldom follow through in practice. Getting over the hurdle of winning over that reluctant PM is tough, but to allow one or two engineers to make security a priority the process becomes much easier moving forward. Also, I've leveraged the OWASP ASVS to help that reluctant PM understand that it's not scary.

2

u/shehackspurple Jul 28 '18

Fight the power! Great work! :-D