Security is often seen as a constraint rather than a business driver. Startups with funding from venture capitalists are on the hook to get product features out of the door, lest they risk losing first-mover status in the market. Even established companies that are adding connectivity to their product lines must consider the need to introduce new product features quickly. This focus on speed can come at a cost in the long term.
Investing time up front not only to identify and define security requirements, but also to incorporate all requirements into a product baseline, is time-consuming. Instead, invest in understanding your threats, and prioritizing the requirements that will mitigate those threats.
Focus on building ...
