QAD Precision Application Security Integration Case Study

This case study outlines how QAD Precision, a division of QAD, Inc., has integrated application security (AppSec) into its Global Trade and Transportation Execution (GTTE) software development lifecycle (SDLC) using Veracode's Continuous Software Security Platform. The document details the challenges faced by QAD Precision in securing its software, particularly with the transition to cloud-based solutions. It describes the shift from traditional perimeter security to a DevSecOps approach that embeds security practices into daily development routines. The case study highlights the selection of Veracode for its comprehensive security tools, including Static Analysis, Dynamic Analysis, and Software Composition Analysis. It emphasizes the positive outcomes of this integration, such as reduced software regression, improved developer efficiency, and enhanced security awareness among developers through eLearning. The ongoing nature of security as a process is also discussed, underscoring the importance of maintaining a robust security framework as threats evolve.