Shift Left – how to improve security in your developers’ code – do it earlier

There was a pretty simple premise behind last week’s Shift Left conference, organised by Checkmarx at the Bulgari hotel in Knightsbridge.  If you look at the software development cycle, it typically starts with the setting of requirements, design, build, test, deploy and maintain.  All too often security considerations don’t get a look in until after testing and just before deployment.  But the further to the left on that process that you engage in security, the greater the impact, because later design changes are more complex and difficult to make, more costly, and more time consuming – even if they are still possible.  And a recall of deployed systems is the most costly of all.
 
Continue reading here.