The What, How, and Why of Application Security Training

Organizations embark on Application Security Training for two primary, intertwined reasons – to meet compliance requirements and reduce application security risk. Another motivation is that the AppSec capabilities and skills needed to meet these goals are not easy to find in the job market, so they must be built internally with existing employees. Providing existing employees with new skills and engaging training can also help retain them. But if you're reading this, you already know that and understand that you need, or at least want, an Application Security Training program. Your concern now is, "How do I build an effective program to meet my goals and make the investment in money and time worthwhile?"