Software Security Is OK Good Enough with John B Dickson, CISSP