Femtosecond specializes in providing IT security consulting, project management, and R&D. Consider the next two equations that depict the impacts of cost and schedule for every defect. Our experience and analytical methods can help in reducing the frequency and severity of defects. There are commercial products that are being deployed that will not meet basic security requirements such as those specified in the NIST Special Publication 800-53 Rev 1 (and SP 800-63). The cost to correct these defects later on will dwarf the cost of early detection and correction. Can your organization wait for adequate IT Security?
Where
C = Cost
n = number of defects (problems)
Cb = Base cost without defects
CDi = The Cost per defect i
Where
S = Schedule
Sb = Base schedule without defects
n = number of defects
SDj = The schedule impact (additional time) for defect j