Research into secure software development for uni assignment

Hi there,

I am gathering information on Secure Software Development practices that software companies or developers implement for a masters assignment (in Australia). The report won’t be published and the lecturer will be the only one reading but might be shared through my line of work, with permission. If any developers or companies on here would be willing to give an insight into their secure software practices please feel free to dm me!

Some of the questions that I will be asking:

• What style or methodologies of Software Development Life Cycle does your company employ?

• What tools or processes do you use to integrate secure software practices during development? Were there any issues or successes encountered when doing so?

• What, if any, security training do you provide your staff as part of a secure software lifecycle?

• Do you assess cyber vulnerabilities or perform threat modelling in secure software development?

Thanks!