How to Scale an Application Security Program – Part One
rethinksecurity.io