I'm curious if Microsoft is suffering from a massive loss of generational expertise. At least right after XP we had to go through a security standdown where all code was reviewed and audited throughout the company. Subsequent features and services had to go through a pretty thorough security review at design time as well.
Over the past few years the number of security fiascos has been increasing. Is the internal Security team (forget what the org was called) dead now ?
I'm sure lack of dedicated testing is also a major factor, but do launches no longer have to satisfy a security review ? Maybe in the name of agile development ?
Over the past few years the number of security fiascos has been increasing. Is the internal Security team (forget what the org was called) dead now ?
I'm sure lack of dedicated testing is also a major factor, but do launches no longer have to satisfy a security review ? Maybe in the name of agile development ?