top of page


A personal blog addressing software quality across all aspects of software development, testing, design, and people.
Search


Continuous Compliance: Turning Audits Into Automation
When it comes to application security , compliance can often feel like a roadblock: a slow, manual process that lags behind the pace of...
Craig Risi
Aug 83 min read


Secure Software Development: Building Security Into the Code from Day One
We can secure our access and secure our data ; however, with software the engine driving innovation, it is also a prime target for cyber...
Craig Risi
Jul 113 min read


Data-Centric Security: Protecting What Matters Most
In my previous post, we looked at the importance of focusing on access control and perimeter security. However, protecting the perimeter...
Craig Risi
Jun 273 min read


Identity-Centric Security
In my previous post, I started to look at modernizing security, starting with software architecture. However, when looking at secure...
Craig Risi
Jun 214 min read


Securing Data in your code
In my last post , I looked at some tips on how to write more secure code. However, it’s not just code alone that developers need to...
Craig Risi
Oct 4, 20246 min read
bottom of page