An attribution would have avoided a problem here.
Marcin has a post up comparing the SANS Application Security Procurement Language and the OWASP Secure Software Contract Annex.
Give it a read and see what you think.
Kevin
An attribution would have avoided a problem here.
Marcin has a post up comparing the SANS Application Security Procurement Language and the OWASP Secure Software Contract Annex.
Give it a read and see what you think.
Kevin