Security must be mandated. As long as it is optional, people won't do it.

I get frustrated some days. Trying to implement product security, but it is such an uphill battle.

Developers don't want to do it, managers don't see the value, customers just don't understand, compliance is all over the place.

Until someone high enough in each company demands it and audits each product, or the customer or government mandate a baseline of security, I just don't see it happening.

It's frustrating trying to get money for tools, or developer time to fix …

compliance customers cybersecurity demands developers don high managers people product product security security understand value