CHAPTER 8

image

How to Create a Business Case for Web Application Security

The security of web applications, particularly those that are transaction platforms and those in a constant state of change, is costly to achieve and to maintain. Now, pile on privacy and regulatory-compliance testing and remediating, and the related costs become frustrating to senior managers who see no tangible or visible improvement to the web applications. These expenses must be cost justified in terms of risk and return on investment.

The key to getting the IT security governance committee to fund the appropriate compliance budget is to speak its language. In order to do ...

Get The Manager’s Guide to Web Application Security: A Concise Guide to the Weaker Side of the Web now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.