Press Releases
MICROSOFT SELECTS SECURITY INNOVATION TO DEVELOP E-LEARNING ON SDL BEST
PRACTICES
Wilmington, MA - January 31, 2008 - Security Innovation, the
authority on application security and leading independent provider of
risk assessment, risk mitigation and training services, today announced
that Microsoft (NASDAQ: MSFT ) selected Security Innovation out of many
professional e-learning vendors to develop and conduct 14 e-learning
courses on Microsoft’s Security Development Lifecycle (SDL). Microsoft
SDL is the company’s new software development process that identifies
security activities development teams must follow at each phase of the
application lifecycle. Terms of the multi-year contract were not
disclosed.
Microsoft has used the SDL process on several internal application
development efforts and now wants to roll it out across all Microsoft
product groups. As part of this project, Security Innovation will create
self-paced e-learning software courses with interactive labs and games
to be used to train Microsoft software development teams on Microsoft
SDL. The first e-learning courses were delivered in December 2007.
“Application security knowledge is a significant barrier to developing
and deploying secure applications. One of the most effective weapons to
combat this barrier is user education. Uniting training courses to the
various phases of the software development lifecycle (requirements,
design, development, test and deploy) is what the industry is demanding.
E-learning makes detailed, technical content easily accessible in a
just-in-time, ready-to-use format. A blend of face-to-face and online
training is the best way to continuously monitor and refresh skills.”
“Microsoft is an early adopter and trendsetter in the push for software
security best practices, and this project is a testament to their
efforts. This level of dedication affords Microsoft the opportunity to
lead the way in building software security into the overall software
development process and help eradicate a major source of computing
risk,” said Ed Adams, president and CEO of Security Innovation. “Over
the past year, Security Innovation has customized dozens of courses for
its clients and is currently adapting e-learning curricula for several
enterprise organizations. Microsoft selected Security Innovation due to
the strong combination of our training and e-learning capabilities
coupled with our leadership and domain expertise in application
security.”
About Security Innovation
Security Innovation, Inc. is an independent application security
firm that offers education, risk assessment and risk mitigation
solutions to Fortune/Global 500 and enterprise IT organizations.
Leading companies such as Adobe, Cisco, Fidelity, IBM, ING, HP,
Microsoft, VISA, SAP, Symantec, VeriSign and government agencies,
rely on Security Innovation’s expertise to gain confidence in the
security of applications they build and/or acquire, and facilitate
the technology, process and management change necessary to mitigate
security risk. The company is headquartered in Wilmington, Mass.,
with offices in Amsterdam, The Netherlands and Seattle, Wash. For
more information about Security Innovation, visit
www.securityinnovation.com or call +1.978.694.1008.
Contacts
Davida Dinerman or Nicole Glidden
Schwartz Communications, Inc.
(781) 684-0770
sisecure@schwartz-pr.com



