Our presentation on Building A Web Application Security Program. This was presented as supplementary material to the white paper of the same name.