This is the third blog (first one here
[https://gavinjl.ghost.io/is-your-business-unwilling-to-add-security-features-to-software/]
, second one here
[https://gavinjl.ghost.io/application-security-design-it-in-or-wedge-it-in-at-the-end/],
third on here [https://gavinjl.ghost.io/security-degrades-over-time/]) from a meeting of
the North-East England chapter of (ISC)2 [https://www.isc2.org/