Development teams participate in security upskilling, certification and compliance programs to boost their security skills and establish best practices.
The software development industry could use a security “frequent flyer status” system as an incentive for fostering a “security-first” mindset among developers.
Teams would benefit from a standard to measure success, which could lead to a “trust score” incentivising developers to reach their security goals.
Developers would be evaluated on criteria that prioritizes industry-respected security frameworks, continuous learning and skill development, teamwork, and real-time performance tracking.
Benchmarking/trust score-driven continuous improvement would benefit the organization, individual developer, and safer software at-large.
Over two-thirds of developers find it challenging to write code free from vulnerabilities, and about half admit to willingly leaving vulnerabilities in their code.
It’s necessary to keep a pulse on team members’ motivation to follow industry-respected security frameworks like the OWASP Top 10, regional guidelines, and “Secure-by-Design” principles.
A developer benchmarking program could support developer engagement, excitement and interest toward skill enhancement.
Real-time performance tracking of developers’ security capabilities should extend beyond mere training and skill assessments to analyse their behaviour during code production.
Establishing a measurement for verifying developers' secure coding skills will make them more capable and marketable on a professional level, leading to job opportunities and promotions.