tag:blogger.com,1999:blog-8954966646386655038.post594169772115755085..comments2009-01-30T08:35:05.403-05:00Jason Yuenhttp://www.blogger.com/profile/01689037743235268269noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-8954966646386655038.post-66606588812607663092009-01-30T08:35:00.000-05:002009-01-30T08:35:00.000-05:00Andres, thanks for the feedback.<BR/><BR/>Yes I do have a few ideas in the upcoming posts. It is mainly pertaining to security design reviews and early stages of planning. Stay tuned!Jason Yuenhttp://www.blogger.com/profile/01689037743235268269noreply@blogger.comtag:blogger.com,1999:blog-8954966646386655038.post-76265365739213933352009-01-28T10:59:00.000-05:002009-01-28T10:59:00.000-05:00Jason, you are making an excellent point.<BR/><BR/>Do you have any suggestion for the project manager that is required by the customer to meet a short deadline and with a small budget? How to add security as part of the requirements for the applications under these constraints?<BR/><BR/>A big part of the issue, in my opinion, is the lack of understanding by the business and application owners. It is simply not that important to them, until their application gets hacked, but then it is too late.Andres Vivashttp://blog.andresvivas.comnoreply@blogger.com