Secure Software Systems

Introduction

Without a doubt, the most important factor in determining the state of security in an organization is its culture. Since security depends so highly on human factors, the only way to effectively manage those factors is through the influence of culture. Simply defining and describing what everyone must do is not sufficient. First, one cannot ever adequately describe everything that must be done, and further, even if everything could be defined, read, and memorized, that is not adequate insurance that anyone in an organization would ever follow the guidelines.

A key element of any organization is the organizational culture. This is a set of norms and expectations commonly held by the majority of people within an organization. Organizational ...