Corporate vs. Product Security

The typical corporate security employee is tasked to defend and protect the enterprise, including the web servers, the corporate email, and corporate secrets. But there is a very different security focus for those who must design security into the products that a corporation produces, whether that product is an appliance, a software application, or a service. Identifying and separating product security teams from the corporate security teams is critical for their success. This paper will explain these differences, recommend a relationship between the two, and address scenarios when their borders overlap and recommend how to deal with them.