To conclude, effective secure development will only become more widespread when organisations receive better education. To achieve this security consultancies need to adopt an active campaign and the media need to provide coverage. Software Development Managers must also prepare their departments for change; they need to understand the benefits of early secure development implementation and be able to eliminate any animosity or suspicion their teams may have of security consultancies.


Through fuller integration of security and development activities, the effectiveness and efficiency of security assessment will be increased and streamlined, the associated costs greatly reduced and organisations will enjoy the return on security investments (ROSI) at a greater rate. Until then, however, those organisations that are already using secure development implementation early in their development cycles will be able to continue to reap greater advantages over their competition.