Greetings readers, it's been a while since I wrote up an article - but I've been busy I assure you.  I've been gathering up information for the series you're about to read over the coming weeks.

 As I travel and speak to large enterprises at the starting stages of implementing web application security programs, I've noticed a trend in the types of challenges CISOs and  security program leaders face.  While the questions are asked slightly differently from place to place, the enterprise profiles are different, the applications are different - everyone is asking the same thing.  CISOs and web application security program leaders are desperate to know how they can implement their fledgling programs with little or no budget.

 I know, you're reading this thinking - "we have the same exact problem"... and I'd like to say that I have an answer for you.  While it's not going to work 100% of the time, and there is still some work for you to do - I do have the answer.

Think of it- what if you could build a program that has the PPT (People, Processes, Tools) you wanted, without any of the budgetary requirements.  What if you could do it without putting a single additional penny into your budget?

Stay tuned.  I'll show you how.