Secure by DesignSoftware Quality
Front
Software quality and software security are not separate concerns — they are deeply intertwined.
Defects in logic, memory management, input handling, and error recovery are both quality and security matters. Products built with high craftsmanship standards tend to have fewer exploitable weaknesses.
Separating "security" from "quality" in development processes often means neither gets the attention it deserves.
Or more succinctly: We don't have a cybersecurity problem, we have a software quality problem.
Back
Discussion prompts
- How does your team define software quality — and does that definition include security?
- What quality targets have you set for your software? And what security targets?
- How do you measure quality over time? (see PR-02)