Managing application risks separately from organizational assets leads to risk silos. Read how to incorporate AppSec into vulnerability management.

Do you think that simple tools like Gaussian blurs can safely redact sensitive content in your online images? See Optiv's solution to the....

This is the last post in my series on creating an effective AppSec program within your organization. In my last post, we discussed the importance of....

In my last blog post, I talked about what an application security (AppSec) program is and how an organization would go about building a formal program....

An application security (AppSec) program can be defined as the set of risk mitigating controls and business functions that support the discovery....

t’s no secret that finding and retaining dependable, well-trained application security professionals is a serious challenge, and has been for years....

As the secure SDLC program matures, vulnerabilities should be caught and remediated earlier in the lifecycle. To know if the program is truly working....

The term “knowledge management” (KM) refers to using vulnerability mining to turn remediation into lessons learned. Essentially this involves taking....

Most organizations would agree that maintaining a fast, predictable flow of planned work (e.g. projects, scheduled changes) that achieves business....

Building an application catalog is a critical step towards maintaining governance over a secure SDLC program. The primary purposes of the catalog are....