Fourth and final thought - for now-, from a cost-benefit analysis standpoint, it is not beneficial to hire full time Application Security personnel. BUT, it is

Fourth and final thought - for now-, from a cost-benefit analysis standpoint, it is not beneficial to hire full time Application Security personnel. BUT, it is extremely beneficial to have someone overlooking the tool/SW from an application security perspective, either on an ad-hoc or part-time basis. That's very important to have a secure software, trusted by the purchasing entities. Thanks, Waleed Waheed. Sr Mgr GRC, RSA Security.