noFUD – No Fear Uncertainty or Doubt

After several requests from customers about information on how enterprise class application security programs are set up, I am writing a series of blogs about my experience helping some large enterprises set up application security teams similar to the ACE team at Microsoft. This series will share lessons learnt at Microsoft IT and other large enterprises.

Application Security Governance 1: Understanding your portfolio

Application Security Governance 2: Mandatory or not?

This entry was posted on April 27, 2008 at 10:00 am and is filed under Application Security, Governance, Security, Strategy. You can subscribe via RSS 2.0 feed to this post's comments. You can comment below, or link to this permanent URL from your own site.