[Autogenerated] But let's assume the Benz boss is quite
meticulous about seeking in business case for any new
work or changes to the process.
So let's dig into the first item here, by way of example,
off quantifying the true benefits for global Mantex.
By introducing Dave Seco,
we have suggested that there will be a reduction in the time
required for rework or fixing security vulnerabilities.
As a result of introducing Dave SEC Apps,
Ben's manager may challenges and want to know more
specifics in terms of the true benefit.
What we can do in this case is look at the classic bug cost
diagram that has been around for decades.
Next, the National in Suit for Standards and Technology in the U.
S.
And other research houses has done some significant research into this area.
The findings from the research indicate that the longer it takes
for a boat or issue to be identified in the cold,
the more cost it is far cheaper to identify and re
mediate Boggs into design and requirements.
Phase Dan, it is when the product is in production.
Security vulnerabilities er just bulks thes are books that need remediation.
So the same model applies to security vulnerabilities.
The longer you leave it toe,
identifying your immediate security vulnerabilities is going to cost
you significantly more to re mediate these issues.
Def.
SEC Ops is all about shifting left moving the security testing
to be as early as possible in the life cycle.
By doing this,
we avoid the expensive deferral off security vulnerability remediation costs.
This is a clear business case to make for your manager and your team to
help you introduce def sec ups in your organization.