Over 70% of Organizations Have Shifted AppSec Responsibility to Developers, Survey Shows

WhiteSource's survey of 650 developers reveals how application security change of ownership is impacting secure coding practices

News provided by

WhiteSource

Jun 12, 2019, 14:55 ET

TEL AVIV, Israel, June 12, 2019 /PRNewswire/ -- WhiteSource, the leader in open source security and license compliance management, released today the results of their recent survey, which examined how developers are coping with the increased complexity of application security.

The survey gathered responses from 650 developers in North America and Western Europe about how their organizations handle the day-to-day operational responsibility for application security from identification to remediation. It found:

71% of the organizations have shifted ownership of day-to-day operational responsibility for application vulnerabilities to software development teams
This has led developers to think differently about security, as 58% stated they view security as a top priority
Security is also driving implementation of DevSecOps practices, as companies that have shifted responsibility to developers are almost four times more likely to integrate application security testing such as SCA and SAST to their IDEs and repositories
Organizations are recognizing this shift in ownership and are taking steps to empower developers to handle security, with 56% of developers stating their companies provide security training on a regular basis. North American respondents cited greater investment than those from Europe

"The survey results reflect what we have been hearing from our partners and customers, which is that vulnerability management tools must meet the needs of the teams using them," said WhiteSource CTO Doron Cohen. "This is why we've created WhiteSource for Developers, a developer-focused solution to help close the loop from alerts to remediation, automating processes to enable developers to keep up their pace without sacrificing quality or security."

The complete report can be viewed here.

About WhiteSource

WhiteSource is the leader in continuous open source security and license compliance management. Its vision is to empower businesses to develop better software by harnessing the power of open source. Industry leaders like Microsoft, IBM, and hundreds more trust WhiteSource to secure and manage the open source components in their software. For more information, please visit www.whitesourcesoftware.com

Head of Communications
Gabriel Avner
[email protected]
https://www.whitesourcesoftware.com/

SOURCE WhiteSource