3 ms·
That only works if your application is simple enough for the infosec folks to know how to write a patch for it. If the organization has 200 of those apps, it's
by jvehent 10y ago
That only works if your application is simple enough for the infosec folks to know how to write a patch for it.
If the organization has 200 of those apps, it's unlikely a transversal security team is able to write patches for each one of them.
- FlyingCoconut 10y agoWhither Agile? Cross functional teams, sitting together. This is The Reason (tm) :)
- yarrel 10y agoNot patches, bug reports. With information in. So the problem can be reproduced and prioritized. As part of the normal development process.