Moving from tool approval to true governance is the only way for CISOs to keep pace with the accelerating velocity of software risk.

Executive assistant director for cybersecurity says the current model "does not account for the capability and the acceleration of the adversaries who we're up against."