Recently at a security meetup it was said that ideally your security and developer people work together to secure a companies software, but generally they don't (if there's a sec team in the first place). So how does it work at your company?
We have a well decorated military general as our Director of IT Security. The general's background is purely in business administration and not background in IT security.
