{"id":10736,"date":"2018-03-13T11:13:22","date_gmt":"2018-03-13T10:13:22","guid":{"rendered":"https:\/\/stage-fp.webenv.pl\/blog\/?p=10736"},"modified":"2023-07-12T13:36:16","modified_gmt":"2023-07-12T11:36:16","slug":"whitepaper-why-is-software-security-so-important","status":"publish","type":"post","link":"https:\/\/www.future-processing.com\/blog\/whitepaper-why-is-software-security-so-important\/","title":{"rendered":"Whitepaper: Why is software security so important?"},"content":{"rendered":"\n

In order to stay resilient to these breaches, it is crucial for organisations to take a proactive approach to security and weave it into the fabric of their culture. Secure development must be a part of a new company policy.<\/p>\n\n\n\n

Is DevSecOps just another buzzword or rather a necessity? How to increase ROI through software security? Why align security and compliance and how to measure security requirements?<\/strong> You will find answers to these – and many other important questions \u2013 in our newest whitepaper on software security.<\/p>\n\n\n\n


<\/p>\n\n\n\n

Protecting Your Business<\/h2>\n\n\n\n

According to the latest Symantec Internet Security Threat Report<\/a>, in the last 8 years more than 7.1 billion identities were exposed in data breaches.<\/p>\n\n\n\n

New classes of attacks, such as ransomware and targeted espionage attacks show new levels of cybercriminal ambition. Additionally to potential financial losses, such attacks have an unquantifiable, negative impact on customer confidence and on brand value.<\/p>\n\n\n\n

The new GDPR law will introduce a great challenge for all organisations that process personal data. Building the software with security-in-mind approach (which includes regular testing, vulnerability assessment and penetration testing – both using automated tools, and as an expert-driven manual process) allows organisations to go beyond today\u2019s compliance requirements, enabling them to be proactive and forward-thinking.<\/p>\n\n\n\n

The Ponemon Cost of Data Breach Study shows that the global average cost of data breach is $3.62 million. The average cost for each lost or stolen records containing sensitive and confidential information was measured as $141 in the study.<\/p>\n\n\n\n

The report includes data from 419 companies in 13 countries or regions. It also states that the cost of a data breach depends on the industry, indicating healthcare organisations and financial services leaks as the most costly.<\/p>\n\n\n\n

Businesses operating in these industries should ensure that they have a proper security programme in place. The predictions are that the threats are set to worsen. Adoption of new technologies (IoT, Cloud Computing, mobile devices) expands the threat landscape. <\/p>\n\n\n\n

New bugs and vulnerabilities are discovered every day. And most of the websites serving malicious content were once legitimate websites that have been compromised by attackers.<\/p>\n\n\n\n

BREACHES<\/td>2014<\/td>2015<\/td>2016<\/td><\/tr>
TOTAL BREACHES<\/td>1,523<\/td>1,211<\/td>1,209<\/td><\/tr>
BREACHES WITH MORE THAN 10 MILION IDENTITIES EXPOSED<\/td>11<\/td>13<\/td>15<\/td><\/tr>
TOTAL IDENTITIES EXPOSED<\/td>1,2B<\/td>564M<\/td>1,1B<\/td><\/tr>
AVERAGE IDENTITIES EXPOSED PER BREACH<\/td>805K<\/td>466K<\/td>927K<\/td><\/tr><\/tbody><\/table>
Source: 2017 Internet Security Threat Report https:\/\/www.symantec.com\/security-center\/threat-report
<\/figcaption><\/figure>\n\n\n\n


<\/p>\n\n\n\n

<\/p>\n\n\n\n

Secure Development Must Be Part of Company Culture<\/h2>\n\n\n\n

Development lifecycle is a process which guides developers on how to build software. It usually contains the following phases:<\/p>\n\n\n\n