Engage your organization's software development community with the necessary training and tools so that they can build secure applications. In most cases, your team members are very conscientious and want to do a great job for your organization. If your application development group is consistently developing insecure software, they may lack the necessary skills to identify the insecure code.

By establishing a training program, you will give your developers the ability to identify and remediate vulnerabilities in their software as it is being developed. This will greatly decrease the development time for the software as new application code will not need to be stuck in multiple cycles of security testing and remediation to be approved for production.

This training will serve to provide the application developers with the tools to prevent the web application vulnerabilities that are so prevalent in modern web applications, such as:

• SQL injection
• Cross-site request forgery
• Cross-site scripting