Some well-meaning folks at SANS suggested that developers should be held liable for introducing vulnerabilities into their application code. Blaming developers for application security problems is exactly the wrong thing to do. Blame is a culture problem that destroys any hope of developers, architects and security specialists working together. In Part 2 next month, we’ll discuss some simple things that you can do to change your software engineering culture to encourage security. In Part 1: Avoiding the AppSec Blame Game – Part 1.”]
Source: https://www.cuinfosecurity.com/blogs/avoiding-appsec-blame-game-part-1-p-1310