Application Security is much different than other security domains, so applying the standard methods does not necessarily address the unique challenges that AppSec can bring. AppSec attacks are more insidious since they are executed via legitimate-looking traffic. The CISO’s role in helping getting everyone on board with AppSec is discussed in this whitepaper. The organization needs to understand how to communicate to the board the need of creating a successful AppSec program;. The organizational and strategic challenges of cybersecurity, and what it means for your organization.”]
Source: https://www.bankinfosecurity.com/whitepapers/your-whole-company-on-board-application-security-w-4518