Le Grand also emphasizes the executive’s role in security risk management
because “any enterprise-wide program for managing software risk requires
executive-level sponsorship and leadership.”
For Further Reading