It happens one day, seeming out of nowhere. Your manager has a revelation (usually inspired by an incident, or the board of directors) and walks into your cubicle and says “We should put together an application security program”.
Now what?
Let’s be realistic here for a moment – you’re understaffed, overworked, and ill-prepared to roll …