Unsung Hero post at WhiteHat Security

I was invited to write something up on appsec from a development manager's perspective as part of WhiteHat Security's "Unsung Hero Program". Here is my post "Easy things are often the hardest to get right".