“The answer to your question is the one aspect of a software security transformation that's often ignored— there's people involved and people have to change behavior, and those softer skills in terms of behavior change are essential to any software security program success.”

Transcript evidence from Jim Routh — Secure software pipelines.