2009-06-23 Setting the appropriate security defect handling expectations in development and QA http://www.qasec.com/2009/06/setting-the-appropriate-security-defect-handling-expectations-in-development-and-qa.html