practitionerOWASP Projects
Use risk prioritization to decide what to fix first
Said by Steve Springett ·
“Use it as a risk prioritization tool, not as a way to not fix something”
Transcript evidence from Steve Springett — An insiders checklist for Software Composition Analysis.