Who is responsible for security flaws?

Question

If you are an application programmer with potential (costly) consequences, if the application’s security is compromised, are you responsible if something goes wrong (for example, data leaked)?

Depends on this, do you manage the project?

Answer 1

If you ever take this position as a programmer - costly consequences - the application has a security flaw - you must clearly have a security breach plan. Get it in writing. Tell us about who is losing their jobs.

. , - . , , .

- , .

Answer 2

, . , . , .

Answer 3

, ( , , ).

EULA , ..

Answer 4

, , , . , , ​​ .

, , , - , , . , - , , - , , , . , , .

Answer 5

, (, , ), , :)

Answer 6

, . , , , , , .

Answer 7

, .

...- And for those organizations that do not have such teams, the security concept should be directed forward, as the goal identified from the very beginning of the project. If it is not a milestone, then neither the programmer nor the manager will take the initiative to implement it (often this is often on the list of priorities, often due to time limitations, the latter will be taken care of - although it is important).