“When we build requirements, we have to, we have to have security in the conversation so we're building good security requirements so that we can build good design, so that now we can take the design and implement it correctly in software and then code.”

Transcript evidence from Conclusion: All the Pieces You Need for an #AppSec Program.