---
title: "Secure by Design: Part One"
description: In Part One of his blog series on Secure Design, Larry Skelly introduces the need for security activities to span the entire life cycle of software development.
image: https://info.obsglobal.com/hubfs/Blog_Images/privacy-policy-2117996_1920.jpg
---

[![Online Business Systems](https://info.obsglobal.com/hubfs/OBS%20+%20CGI%20LOGO%203.png)](https://www.obsglobal.com)

Toggle navigation

About

![](https://info.obsglobal.com/hubfs/About-Our_Approach.png)

###### Our Company

![](https://info.obsglobal.com/hubfs/Our-Community-Icon.png)

###### Our Community

![](https://info.obsglobal.com/hubfs/Executive-Team-Icon.png)

###### Executive team

![](https://info.obsglobal.com/hubfs/About-Partners.png)

###### Partners & Clients

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-News.png)

###### News

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-Events.png)

###### Events

Services

### [DIGITAL TRANSFORMATION](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

![Digital Advisory Services](https://info.obsglobal.com/hubfs/dig-trans-cons-1.png)

##### [Digital Advisory Services](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

[Assessment,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#assessment) [Strategy & Roadmap,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap) <https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap>[Enterprise Performance Management,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management) [Change Management](https://www.obsglobal.com/digital-transformation/change-management)

![Digital Studio Products](https://info.obsglobal.com/hubfs/dig-prod-dev.png)

##### [Digital Studio](https://www.obsglobal.com/digital-transformation/digital-studio)

[Custom Software Development,](https://www.obsglobal.com/digital-transformation/digital-studio/custom-software-development/) [Product Vision,](https://www.obsglobal.com/digital-transformation/digital-studio/product-vision) [Product Delivery,](https://www.obsglobal.com/digital-transformation/digital-studio/digital-product-delivery/) [Product Operations](https://www.obsglobal.com/digital-transformation/digital-studio)

![Salesforce](https://info.obsglobal.com/hubfs/salesforce-1.png)

##### [Salesforce](https://www.obsglobal.com/digital-transformation/salesforce)

[Sales Cloud,](https://www.obsglobal.com/digital-transformation/salesforce/#sales_cloud) [Marketing Cloud,](https://www.obsglobal.com/salesforce-marketing-cloud/) [Service Cloud,](https://www.obsglobal.com/digital-transformation/salesforce) <https://www.obsglobal.com/digital-transformation/salesforce/#lightening_enablement>[Agentforce,](https://www.obsglobal.com/digital-transformation/salesforce/salesforce-agentforce/) [Salesforce Consulting](https://www.obsglobal.com/salesforce-consulting)<https://www.obsglobal.com/digital-transformation/salesforce/#mulesoft_integration>

![Service Management](https://info.obsglobal.com/hubfs/2020-02-26-16_37_21-Clipboard.png)

##### [Service Management](https://www.obsglobal.com/digital-transformation/service-management)

[IT Service Management,](https://www.obsglobal.com/digital-transformation/service-management#it_service_management) [Enterprise Service Management](https://www.obsglobal.com/digital-transformation/service-management/enterprise-sm)

![Customer Engagement](https://info.obsglobal.com/hubfs/dig-adv.png)

##### [Customer Engagement](https://www.obsglobal.com/digital-transformation/customer-engagement)

[Contact Center Consulting,](https://www.obsglobal.com/digital-transformation/customer-engagement/contact-center-consulting) [Five9,](https://www.obsglobal.com/partners-and-clients/five9/) [Contact Center as a Service (CCaaS),](https://www.obsglobal.com/contact-center-as-a-service-ccaas/) [Conversational AI](https://www.obsglobal.com/digital-transformation/customer-engagement/conversational-ai)

![Business and Technical Consulting](https://info.obsglobal.com/hubfs/2020-02-26-16_37_40-Clipboard.png)

##### [Business and Technical Consulting](https://www.obsglobal.com/digital-transformation/business-and-technical-consulting)

[Project Management,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Quality Assurance  Development & AMS,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Systems Integration,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Cloud Deployment,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Infrastructure Managed Services](https://www.obsglobal.com/digital-transformation/business-technical-consulting/infrastructure-managed-services/)

![Data Services](https://info.obsglobal.com/hubfs/DataServices-icon.png)

##### [Data Services](https://www.obsglobal.com/digital-transformation/data-services/)

[Data Engineering & Architecture,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Management & Governance,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Analytics & Reporting](https://www.obsglobal.com/digital-transformation/data-services/)

![ai-sparkle](https://info.obsglobal.com/hubfs/ai-sparkle.png)

##### [Artificial Intelligence](https://www.obsglobal.com)

[GenAI](https://www.obsglobal.com/gen-ai), [GenAI Workshops,](https://info.obsglobal.com/gen-ai-workshop-registration) [Document Intelligence](https://www.obsglobal.com/innovation-lab/document-intelligence)<https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management>

### [CYBERSECURITY](https://www.obsglobal.com/cybersecurity)

![2020-02-26-16_38_37-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_37-Clipboard.png)

##### [Security Advisory Services](https://www.obsglobal.com/cybersecurity/security-advisory-services)

[CISO Services](https://www.obsglobal.com/cybersecurity/security-advisory-services/vciso/) [Security Program Management](http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/)                                            [Digital Forensics & Incident Response (DFIR)](https://info.obsglobal.com/digital-forensics-incident-response)<http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/>

![2020-02-26-16_38_23-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_23-Clipboard.png)

##### [Assessment Services](https://www.obsglobal.com/cybersecurity/assessment-services)

[PCI Compliance and Assessment](https://www.obsglobal.com/compliance-assessment-pci) Third-Party Risk Assurance [Risk & Privacy Readiness Assessment and Remediation](https://www.obsglobal.com/cybersecurity/assessment-services) Compliance and Assessments: ISO, NIST, SOC, GDPR

![2020-02-26-16_38_09-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_09-Clipboard.png)

##### [Offensive Security Services](https://www.obsglobal.com/cybersecurity/offensive-security-services)

[Penetration Testing – Network](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Wireless](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Web & App](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Red Teaming](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Social Engineering](https://www.obsglobal.com/cybersecurity/offensive-security-services#social_engineering) [Secure Code Analysis & Review](https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review) [Vulnerability Assessment](https://www.obsglobal.com/cybersecurity/offensive-security-services/vulnerability-assessment/) [Autonomous & Continuous Testing](https://info.obsglobal.com/autonomous-continuous-testing)<https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review>

![RSP Health-Color Thin](https://info.obsglobal.com/hubfs/RSP%20Health-Color%20Thin.png)

##### [Healthcare Cybersecurity](https://www.obsglobal.com/cybersecurity/rsp-health/)

[Risk Management Program](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HITRUST Readiness](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HIPAA Compliance](https://www.obsglobal.com/cybersecurity/health-cybersecurity/)<https://www.obsglobal.com/cybersecurity/rsp-health/>

![CloudSecurity_icon_WP-jm](https://info.obsglobal.com/hubfs/CloudSecurity_icon_WP-jm.png)

##### [Cloud Security Services](https://www.obsglobal.com/cybersecurity/cloud-security-services/)

[Cloud Security Advisory](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Engineering](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Assessment (FedRAMP/StateRAMP)](https://www.obsglobal.com/cybersecurity/cloud-security-services)

Innovation

![](https://info.obsglobal.com/hubfs/Bulb_Brain.png)

###### Innovation Lab

Careers

![](https://info.obsglobal.com/hubfs/Careers-Available_Positions.png)

###### CURRENT OPENINGS

![](https://info.obsglobal.com/hubfs/Careers_Working_At-Online.png)

###### OUR CULTURE

![](https://info.obsglobal.com/hubfs/Our-Benefits1.png)

###### OUR BENEFITS

![](https://info.obsglobal.com/hubfs/Address.png)

###### CULTURE CREDO

Insights

![](https://info.obsglobal.com/hubfs/BLOGS-icon-5ed95c0032155.png)

###### Blog

![](https://info.obsglobal.com/hubfs/CX%20Solutions%20Icon.png)

###### Customer Experience

![](https://info.obsglobal.com/hubfs/Agile%20Transformation%20Mega%20Menu%20Icon.png)

###### Agile Transformation

![](https://info.obsglobal.com/hubfs/b2b%20ecommerce%20icon.png)

###### B2B eCommerce

![](https://info.obsglobal.com/hubfs/Financial-Services-Icon.png)

###### Financial Services

Contact

![](https://info.obsglobal.com/hubfs/ContactUs_Contact-Us-Form.png)

###### Contact Us

![](https://info.obsglobal.com/hubfs/ContactUs-Locations.png)

###### Locations

About

![](https://info.obsglobal.com/hubfs/About-Our_Approach.png)

###### Our Company

![](https://info.obsglobal.com/hubfs/Our-Community-Icon.png)

###### Our Community

![](https://info.obsglobal.com/hubfs/Executive-Team-Icon.png)

###### Executive team

![](https://info.obsglobal.com/hubfs/About-Partners.png)

###### Partners & Clients

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-News.png)

###### News

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-Events.png)

###### Events

Services

### [DIGITAL TRANSFORMATION](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

![Digital Advisory Services](https://info.obsglobal.com/hubfs/dig-trans-cons-1.png)

##### [Digital Advisory Services](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

[Assessment,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#assessment) [Strategy & Roadmap,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap) <https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap>[Enterprise Performance Management,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management) [Change Management](https://www.obsglobal.com/digital-transformation/change-management)

![Digital Studio Products](https://info.obsglobal.com/hubfs/dig-prod-dev.png)

##### [Digital Studio](https://www.obsglobal.com/digital-transformation/digital-studio)

[Custom Software Development,](https://www.obsglobal.com/digital-transformation/digital-studio/custom-software-development/) [Product Vision,](https://www.obsglobal.com/digital-transformation/digital-studio/product-vision) [Product Delivery,](https://www.obsglobal.com/digital-transformation/digital-studio/digital-product-delivery/) [Product Operations](https://www.obsglobal.com/digital-transformation/digital-studio)

![Salesforce](https://info.obsglobal.com/hubfs/salesforce-1.png)

##### [Salesforce](https://www.obsglobal.com/digital-transformation/salesforce)

[Sales Cloud,](https://www.obsglobal.com/digital-transformation/salesforce/#sales_cloud) [Marketing Cloud,](https://www.obsglobal.com/salesforce-marketing-cloud/) [Service Cloud,](https://www.obsglobal.com/digital-transformation/salesforce) <https://www.obsglobal.com/digital-transformation/salesforce/#lightening_enablement>[Agentforce,](https://www.obsglobal.com/digital-transformation/salesforce/salesforce-agentforce/) [Salesforce Consulting](https://www.obsglobal.com/salesforce-consulting)<https://www.obsglobal.com/digital-transformation/salesforce/#mulesoft_integration>

![Service Management](https://info.obsglobal.com/hubfs/2020-02-26-16_37_21-Clipboard.png)

##### [Service Management](https://www.obsglobal.com/digital-transformation/service-management)

[IT Service Management,](https://www.obsglobal.com/digital-transformation/service-management#it_service_management) [Enterprise Service Management](https://www.obsglobal.com/digital-transformation/service-management/enterprise-sm)

![Customer Engagement](https://info.obsglobal.com/hubfs/dig-adv.png)

##### [Customer Engagement](https://www.obsglobal.com/digital-transformation/customer-engagement)

[Contact Center Consulting,](https://www.obsglobal.com/digital-transformation/customer-engagement/contact-center-consulting) [Five9,](https://www.obsglobal.com/partners-and-clients/five9/) [Contact Center as a Service (CCaaS),](https://www.obsglobal.com/contact-center-as-a-service-ccaas/) [Conversational AI](https://www.obsglobal.com/digital-transformation/customer-engagement/conversational-ai)

![Business and Technical Consulting](https://info.obsglobal.com/hubfs/2020-02-26-16_37_40-Clipboard.png)

##### [Business and Technical Consulting](https://www.obsglobal.com/digital-transformation/business-and-technical-consulting)

[Project Management,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Quality Assurance  Development & AMS,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Systems Integration,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Cloud Deployment,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Infrastructure Managed Services](https://www.obsglobal.com/digital-transformation/business-technical-consulting/infrastructure-managed-services/)

![Data Services](https://info.obsglobal.com/hubfs/DataServices-icon.png)

##### [Data Services](https://www.obsglobal.com/digital-transformation/data-services/)

[Data Engineering & Architecture,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Management & Governance,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Analytics & Reporting](https://www.obsglobal.com/digital-transformation/data-services/)

![ai-sparkle](https://info.obsglobal.com/hubfs/ai-sparkle.png)

##### [Artificial Intelligence](https://www.obsglobal.com)

[GenAI](https://www.obsglobal.com/gen-ai), [GenAI Workshops,](https://info.obsglobal.com/gen-ai-workshop-registration) [Document Intelligence](https://www.obsglobal.com/innovation-lab/document-intelligence)<https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management>

### [CYBERSECURITY](https://www.obsglobal.com/cybersecurity)

![2020-02-26-16_38_37-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_37-Clipboard.png)

##### [Security Advisory Services](https://www.obsglobal.com/cybersecurity/security-advisory-services)

[CISO Services](https://www.obsglobal.com/cybersecurity/security-advisory-services/vciso/) [Security Program Management](http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/)                                            [Digital Forensics & Incident Response (DFIR)](https://info.obsglobal.com/digital-forensics-incident-response)<http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/>

![2020-02-26-16_38_23-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_23-Clipboard.png)

##### [Assessment Services](https://www.obsglobal.com/cybersecurity/assessment-services)

[PCI Compliance and Assessment](https://www.obsglobal.com/compliance-assessment-pci) Third-Party Risk Assurance [Risk & Privacy Readiness Assessment and Remediation](https://www.obsglobal.com/cybersecurity/assessment-services) Compliance and Assessments: ISO, NIST, SOC, GDPR

![2020-02-26-16_38_09-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_09-Clipboard.png)

##### [Offensive Security Services](https://www.obsglobal.com/cybersecurity/offensive-security-services)

[Penetration Testing – Network](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Wireless](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Web & App](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Red Teaming](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Social Engineering](https://www.obsglobal.com/cybersecurity/offensive-security-services#social_engineering) [Secure Code Analysis & Review](https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review) [Vulnerability Assessment](https://www.obsglobal.com/cybersecurity/offensive-security-services/vulnerability-assessment/) [Autonomous & Continuous Testing](https://info.obsglobal.com/autonomous-continuous-testing)<https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review>

![RSP Health-Color Thin](https://info.obsglobal.com/hubfs/RSP%20Health-Color%20Thin.png)

##### [Healthcare Cybersecurity](https://www.obsglobal.com/cybersecurity/rsp-health/)

[Risk Management Program](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HITRUST Readiness](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HIPAA Compliance](https://www.obsglobal.com/cybersecurity/health-cybersecurity/)<https://www.obsglobal.com/cybersecurity/rsp-health/>

![CloudSecurity_icon_WP-jm](https://info.obsglobal.com/hubfs/CloudSecurity_icon_WP-jm.png)

##### [Cloud Security Services](https://www.obsglobal.com/cybersecurity/cloud-security-services/)

[Cloud Security Advisory](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Engineering](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Assessment (FedRAMP/StateRAMP)](https://www.obsglobal.com/cybersecurity/cloud-security-services)

Innovation

![](https://info.obsglobal.com/hubfs/Bulb_Brain.png)

###### Innovation Lab

Careers

![](https://info.obsglobal.com/hubfs/Careers-Available_Positions.png)

###### CURRENT OPENINGS

![](https://info.obsglobal.com/hubfs/Careers_Working_At-Online.png)

###### OUR CULTURE

![](https://info.obsglobal.com/hubfs/Our-Benefits1.png)

###### OUR BENEFITS

![](https://info.obsglobal.com/hubfs/Address.png)

###### CULTURE CREDO

Insights

![](https://info.obsglobal.com/hubfs/BLOGS-icon-5ed95c0032155.png)

###### Blog

![](https://info.obsglobal.com/hubfs/CX%20Solutions%20Icon.png)

###### Customer Experience

![](https://info.obsglobal.com/hubfs/Agile%20Transformation%20Mega%20Menu%20Icon.png)

###### Agile Transformation

![](https://info.obsglobal.com/hubfs/b2b%20ecommerce%20icon.png)

###### B2B eCommerce

![](https://info.obsglobal.com/hubfs/Financial-Services-Icon.png)

###### Financial Services

Contact

![](https://info.obsglobal.com/hubfs/ContactUs_Contact-Us-Form.png)

###### Contact Us

![](https://info.obsglobal.com/hubfs/ContactUs-Locations.png)

###### Locations

×

# Secure by Design: Part One

 By [Larry Skelly](https://info.obsglobal.com/blog/author/larry-skelly) on May 31, 2017 (Last Updated on March 31, 2022 ) 

![](https://info.obsglobal.com/hubfs/Blog_Images/privacy-policy-2117996_1920.jpg)

### Get latest articles directly in your inbox, stay up to date

 Subscribe to our blog

### Topics

- Select a Topic

### Stay up to date

 Subscribe to our blog

### Subscribe Here!

[Back to main Blog](https://info.obsglobal.com/blog)

###### Larry Skelly

[mailto:lskelly@obsglobal.com](mailto:lskelly@obsglobal.com)

*Part one of a three-part blog on building secure solutions using Online’s Secure Solution Delivery Life Cycle (SSDLC).*

[*Click here for Part 2*](https://info.obsglobal.com/blog/secure-by-design-part-two)

[*Click here for Part 3*](https://info.obsglobal.com/blog/secure-by-design-part-three)

 

As attacks move up the stack from the operating system to applications themselves, a shift in the solution delivery life cycle philosophy is emerging, recognizing that security activities need to move earlier in the life cycle, to truly build security effectively. As organizations are pressured by the rapid promotion cycles of DevOps, the focus is often on secure coding, static code analysis tools, and earlier security testing. But this is too late to be effective; in order to build inherently secure applications, our security activities need to span the entire life cycle.

**The Case for Secure Design**

Most common development methodologies treat security as a list of features, use cases, or user stories. For example, we might need a login screen, the ability to keep an audit trail of updates to account data and to obtain a digital signature for an approved document. But security is not as simple as a particular feature or two – it is an ongoing concern that spans all project activities and cuts across all features. It needs to influence everything we do – from requirements to analysis, to design, implementation and deployment.

But there is a natural tension here. Implementing security gets in the way of “real” tasks that produce “working code.” Users want functionality and you can always go back later to add the missing security… right?

So your organization focuses on implementing features in your hip, new MVP (minimum viable product) release of the application… which leads to one of three possible outcomes:

1. You do not perform dynamic application software testing (DAST) or penetration testing after the app is complete, and it is unknowingly insecure. Therefore, you cannot fix it, or mitigate risk by adding compensating controls. You get hacked.
2. You do test your application and find a number of security bugs that can be rectified. The good news is that you can implement compensating controls until the app is remediated. While the compensating controls may compromise functionality or usability while security is retrofitted (which can take a number of months due to the risk involved) you are somewhat secure.
3. You do test your application and the security defects you find are not so simple to remedy. The solution requires a fundamental redesign of your user interface, but the business has a hard deadline and is forced to find a third-party solution and your app is scrapped and never goes live.

If you are very good at pumping out code, but your code is not secure, then you are rapidly increasing the attack surface and accruing a liability for your company, oftentimes at an exponential rate. As the saying goes “tools amplify sound, but they also amplify noise.”

Numerous life cycle cost estimates say that there is a cost multiplier of 100 times if a defect must be remedied in an app after deployment versus if it had been caught at the requirements stage. Very complex or widely distributed solutions might exceed 1000 times. And on top of the higher cost to repair, you also have the added exposure or cost of compensating controls while you do it. There is clearly a business case for designing security into your app from the beginning.

**What is Design?**

Design is any activity where you transform “what the system must do” into “how it does it.” This includes making decisions about components, their scope and behaviour, and the relationships between them. If you are partitioning functionality at any level, allocating features or data to logical or physical components (sites, servers, systems, subsystems, processes, executables, compilation units, procedures, classes, methods, etc.) then you are doing design.

How do we design secure solutions? What makes one design more secure than another? In Part Two of this blog, we will look at a set of fundamental design principles and examples of how Online’s SSDLC can help you apply them. In Part Three we will teach you techniques you can use to apply them across the life cycle.

**About Larry Skelly**

Larry is a TOGAF and ITIL-certified Enterprise Architect in our Risk, Security and Privacy practice, with more than ten years of experience writing and teaching design methodologies and thirty years of experience with architecture and hands-on development. Larry understands the need to infuse security into everything that we do. He was also a primary contributor to Online’s Security Integration Framework (SIF) and Secure Solution Delivery Life Cycle (SSDLC), an approach for implementing secure IT solutions. To continue the conversation, feel free to leave a comment below. To learn more about Online's Risk, Security and Privacy practice, click [here](https://www.obsglobal.com/security-consulting/).

Share this article

[Previous Post](https://info.obsglobal.com/blog/neural-networks-the-security-bombshell)

[Next Post](https://info.obsglobal.com/blog/secure-by-design-part-two)

### Suggested Reading

[![](https://info.obsglobal.com/hubfs/Cloud-Teams-Security.png)](https://info.obsglobal.com/blog/cloud-has-changed-teams-security-should-change-teams-too)

 tags

[Cybersecurity](https://info.obsglobal.com/blog/topic/cybersecurity) [Cloud](https://info.obsglobal.com/blog/topic/cloud)

##### [Cloud has Changed Teams, Security Should Change Teams, Too](https://info.obsglobal.com/blog/cloud-has-changed-teams-security-should-change-teams-too)

[Continue Reading](https://info.obsglobal.com/blog/cloud-has-changed-teams-security-should-change-teams-too)

[![](https://info.obsglobal.com/hubfs/Top5-Signs-you-Need-a-vCISO-blog-banner.jpg)](https://info.obsglobal.com/blog/top-5-signs-you-need-a-virtual-ciso)

 tags

[Security](https://info.obsglobal.com/blog/topic/security) [Cybersecurity](https://info.obsglobal.com/blog/topic/cybersecurity)

##### [Top 5 Signs you Need a Virtual CISO](https://info.obsglobal.com/blog/top-5-signs-you-need-a-virtual-ciso)

[Continue Reading](https://info.obsglobal.com/blog/top-5-signs-you-need-a-virtual-ciso)

[![](https://info.obsglobal.com/hubfs/10-Things-You-Didnt-Know-About-SecMonOps.png)](https://info.obsglobal.com/blog/10-things-you-didnt-know-about-secmonops)

 tags

[Security](https://info.obsglobal.com/blog/topic/security) [Cybersecurity](https://info.obsglobal.com/blog/topic/cybersecurity)

##### [10 Things you Didn’t Know About SecMonOps](https://info.obsglobal.com/blog/10-things-you-didnt-know-about-secmonops)

[Continue Reading](https://info.obsglobal.com/blog/10-things-you-didnt-know-about-secmonops)

#### Submit a Comment

### Get latest articles directly in your inbox, stay up to date

 Subscribe to our blog

- [Our Company](https://www.obsglobal.com/our-company)
- [Our Executive Team](https://www.obsglobal.com/executive-team)
- [Partners & Clients](https://www.obsglobal.com/partners-and-clients)
- [Events](https://www.obsglobal.com/events-2)
- [News](https://www.obsglobal.com/blog-2)
- [Blog](https://info.obsglobal.com/blog)
- [Working at Online](https://www.obsglobal.com/working-at-online)
- [Available Positions](https://www.obsglobal.com/job-openings)
- [Locations](https://www.obsglobal.com/locations)
- [Contact Us](https://www.obsglobal.com/contact-us)

[![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/glassdoor%20hubspot%20footer%20icon.png?width=16&name=glassdoor%20hubspot%20footer%20icon.png)](https://www.glassdoor.ca/Overview/Working-at-Online-Business-Systems-EI_IE373050.11,34.htm)[![](https://info.obsglobal.com/hs-fs/hubfs/youtube-icon.png?width=16&name=youtube-icon.png)](https://www.youtube.com/channel/UCpB4PnAD2VGv9mb0jwaSl-Q) [![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/facebook%20hubspot%20footer%20icon.png?width=16&name=facebook%20hubspot%20footer%20icon.png)](https://www.facebook.com/Online-Business-Systems-Explore-Innovate-Lead-113440482070083/) [![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/linkedin%20hubspot%20footer%20icon.png?width=16&name=linkedin%20hubspot%20footer%20icon.png)](https://www.linkedin.com/company/online-business-systems) [![twitter final](https://info.obsglobal.com/hs-fs/hubfs/twitter%20final.png?width=19&height=19&name=twitter%20final.png)](https://x.com/obs_global)[![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/insta%20hubspot%20footer%20icon.png?width=16&name=insta%20hubspot%20footer%20icon.png)](http://www.instagram.com/obs_global/)<https://www.glassdoor.ca/Overview/Working-at-Online-Business-Systems-EI_IE373050.11,34.htm>

Copyright © 2025 Online Business Systems

- [Privacy Policy](https://www.obsglobal.com/privacy-policy/) - [Accessibility Policy](https://www.obsglobal.com/accessibility-policy/)

![](https://px.ads.linkedin.com/collect/?pid=650121&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=650121&fmt=gif) ![](https://ws.zoominfo.com/pixel/ZKv0AacyinojUGYlbFCd)