Culture, Vulnerabilities and Budget: Why Devs and AppSec Disagree

cultural divide and the security of applications

Developers and security professionals are often in conflict, and this state of affairs is not going to change anytime soon, in this author’s opinion. Now here are some facts about the current state of affairs.

The Ponemon Institute conducted two surveys sponsored by ZeroNorth in May and June of 2020, one of 581 application security (AppSec) professionals and another of 549 application developers. Three-quarters of the AppSec respondents believe there is a cultural divide between them and developers, while only 49% of developers feel the same way towards the AppSec function. The difference in opinion is not because DevSecOps is more likely to have taken hold among developers — adoption is almost the same among both respondent categories.


The complete article can be found here.