The Coates Top 3 Root Causes to Poor Application Security- Lack of Management Support
- Lack of Security Specific Training for Developers
- Absence of Standardized Security Libraries
After you address the Coates Top 3, then you can start to tackle the
OWASP Top 10 or
SANS Top 25-
Michael Coates