The Response – Pharmiweb partnered with Stratum to implement consistent approach to conducting application security assessments, including streamlining the test request, execution of the assessment, delivery of the results in a predictable timeline has enabled Pharmiweb to incorporate these tests into the Software Development Lifecycle (SDLC) process.
The Results – Process and development improvements have shortened the timeline significantly, often to days between delivery of Draft results, mitigation of all issues, retesting to validate fixes, and launching the application. The most significant improvement has been the decrease in the number of findings for each assessment, with some assessments resulting in no issues that need to be addressed prior to launch.