jarick 15608 (4/24/2014)
The push needs to come from someone in senior management with some security smarts. In my experience, very few executives have this knowledge.
In my opinion, the push needs to come from insurance companies. Until people are sued for a lack of security in their software, it's unlikely anything will change. Once insurance companies can charge more for poorly written software insurance, we'll see a shift.