wwaheed

4 ms·

1. 1.▲
   by wwaheed 2y ago

   Fourth and final thought - for now-, from a cost-benefit analysis standpoint, it is not beneficial to hire full time Application Security personnel. BUT, it is extremely beneficial to have someone overlooking the tool/SW from an applic
2. 2.▲
   by wwaheed 2y ago

   Third thought, adopting the principles of the CISA (Cybersecurity and Infrastructure Security Agency) Secure By Design Pledge, even if the new startup is not intended to sign the pledge with CISA it is very beneficial to take the pledge&#x2
3. 3.▲
   by wwaheed 2y ago

   Second thought, I would like to recommend adopting a Secure Development Lifecycle approach. Going for NIST related framework also (SP 800-218), I recommend adopting the principles of this framework: https://csrc.nist.gov/pub
4. 4.▲
   by wwaheed 2y ago

   I have some thoughts here, if the team needs their tool to be well recognized, they must adopt any of the industry best practices for security benchmarks. As I believe that the software should address security concerns, as it addresses perf