Security of your software starts at the organizational level. Good training and process starts at the top and trickles down.