The move to agile development practices poses both challenges and opportunities to security teams. Some organizations, such as the Aetna insurance company and the state of Texas, have found ways to make it work. One of the principles of agile development involves “use cases” — designing for particular applications of the technology. Another way to embed security into the software design process early on is to use static analysis tools on code as it is being written. The result has been better security from the ground up.”]

