Recommendations

• Think of security early and often.

• Adopt a software development model to help define your organization's development activities and flow.

• Define activities for each phase in your model.

• Ensure all developers are trained to develop secure applications.

• Validate your software development project by writing code - plan, specify, and design first.

• Keep the three SDL core concepts in focus - education, continuous improvement, and accountability.

• Develop tests to ensure each component of your application meets security requirements.