Part II describes how to manage application development security.
Managing Security for Application Developers
A security policy for application developers should encompass areas such as password management and securing external procedures and application privileges.