Here is a link of helpful links if you want to double check your existing security code process (y’all do have them – right?):
- [OWASP Code Review]
- [How To: Perform a Security Code Review for Managed Code]
- [Phase 1: Conduct a Security Design Review]
- [Security Code Reviews]
Note as other are suggested, or I find others I’ll update the list.