“The reality is it's an education piece and it makes people aware of the issues, but it's not meant be a standard.”

Transcript evidence from Andrew van der Stock — Taking Application Security to the Masses.