This is the third blog (first one here [https://www.gavinjl.me/is-your-business-unwilling-to-add-security-features-to-software/] , second one here [https://www.gavinjl.me/application-security-design-it-in-or-wedge-it-in-at-the-end/]) from a meeting of the North-East England chapter of (ISC)2 [https://www.isc2.org/], where security experts from the region used the

...security is rarely considered part of a minimum viable product.