Developer Cyber Essentials : Trialling Interventions to Improve Development Security

A series of interventions costing less than two days’ total effort from a facilitator can significantly improve the software security of the products developed by teams in a wide range of companies. This report introduces this series of interventions, explains how they were derived from previous research in industry, and evaluates using Participative Action Research their effectiveness with software development teams in three widely-varied organisations.