I really like the lens vs list way of seeing it. We hear about the Top 10 all over the place, but mostly like a list indeed. I swear by the project and think they deserve much more than being a list! Have you any experience with the OWASP proactive controls? They are gold really, but rarely talked about.
Thanks, Jimmie! I am glad you like this point of view.
And yes, I am a big fan of proactive controls. But you know how it is. They cost money, so you need to choose very carefully where to fight for the budget.
It's just so backwards. Hopefully the new sentiment with regulations that demand secure by default will help this move in the right direction. To me it does not make any sense to continuing to do the same mistakes over and over.
I really like the lens vs list way of seeing it. We hear about the Top 10 all over the place, but mostly like a list indeed. I swear by the project and think they deserve much more than being a list! Have you any experience with the OWASP proactive controls? They are gold really, but rarely talked about.
Thanks, Jimmie! I am glad you like this point of view.
And yes, I am a big fan of proactive controls. But you know how it is. They cost money, so you need to choose very carefully where to fight for the budget.
It's just so backwards. Hopefully the new sentiment with regulations that demand secure by default will help this move in the right direction. To me it does not make any sense to continuing to do the same mistakes over and over.