Comments on: You Need a Software Security Group (SSG) http://www.cigital.com/justice-league-blog/2009/12/21/you-need-a-software-security-group-ssg/ Sun, 13 May 2012 16:44:00 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: gem http://www.cigital.com/justice-league-blog/2009/12/21/you-need-a-software-security-group-ssg/#comment-178 gem Tue, 22 Dec 2009 19:17:50 +0000 http://www.cigital.com/justiceleague/?p=277#comment-178 Hi James, You're right. In my view, software security is worth the investment, but such a decision ultimately depends on the business situation. Don't overlook the fact that the number we discovered for SSG size is a ratio...1% the size of dev. So if you only have 100 developers, that's 1 full time person. Depending on the business that you're that kind of number can make all kinds of sense. We're still not sure how very small companies should react to our findings, but we're running BSIMM Begin to find out. Please fill out a BSIMM Begin survey today and help our cause! gem Hi James,

You’re right. In my view, software security is worth the investment, but such a decision ultimately depends on the business situation.

Don’t overlook the fact that the number we discovered for SSG size is a ratio…1% the size of dev. So if you only have 100 developers, that’s 1 full time person. Depending on the business that you’re that kind of number can make all kinds of sense.

We’re still not sure how very small companies should react to our findings, but we’re running BSIMM Begin to find out. Please fill out a BSIMM Begin survey today and help our cause!

gem

]]> By: James http://www.cigital.com/justice-league-blog/2009/12/21/you-need-a-software-security-group-ssg/#comment-177 James Mon, 21 Dec 2009 17:16:29 +0000 http://www.cigital.com/justiceleague/?p=277#comment-177 This seems like a large investment for a company. What requirements would a smaller operation require? This seems like a large investment for a company. What requirements would a smaller operation require?

]]>