The ‘phasing-in’ of security governance in the SDLC
Jack Danahy · Network Security · 2008
For too long security has been an afterthought in the software development lifecycle (SDLC) with critical security flaws being uncovered either just prior to deployment when they endanger promised release dates, or worse, after an application has been deployed. This is no longer acceptable. Security can be affordable and achievable if integrated properly at each key phase of the SDLC.