Called Cigital Advantage, it is intended to identify risks and implement risk mitigation from the very beginning of the development cycle, straddling the gap between business managers and the technical staff. As part of the design team in the development cycle, Cigital represents the business during software architectural planning. It assesses and measures every artifact produced, providing code review, design review and security assessment as well as configuration management, bug tracking, QA and coverage analysis, Payne said. Some businesses decide the risk is so large and costly, and will exceed the deadline and budget, that they roll the dice and take the risk. But it is a business decision.
Businesses take risks all the time.
A key to Cigital Advantage is certification, he said. Cigital is offering to certify, after inspections by its auditors, that software products are reliable, secure and safe, and will mark the products as such, he said. The plan is backed by insurance for Cigital and business-loss insurance for the end users, he explained. When architecture was 50 years old, buildings were collapsing, or propped up with large poles. A lot of big companies, whose software isn't their core business, can use our help.