I gave a talk outlining my experiences building software security programs last year @ lascon. It appears they posted the video. Given that many of you are in the same position, a few of you may find this useful! Problems you'll face when building a software security program https://www.youtube.com/watch?v=xQEMOyH35Fg&feature=youtu.be&list=PLLWzQe8KOh5luDX7Ig9yVMEVnb1waAS9w Regards, Robert A. Co Founder & Moderator of The Web Security Mailing List http://www.webappsec.org