The Arlington-based research firm argues that organizations must move beyond static security models and adopt an intelligent, capabilities-driven approach. This framework embeds adaptive security measures throughout the entire software lifecycle, transforming security from a potential bottleneck into a driver of development velocity. Ahmad Jowhar, a senior research analyst at Info-Tech, emphasizes that building a scalable, adaptive program allows firms to strengthen foundational practices while ensuring resilience across modern pipelines.

Modernizing Application Security

Many businesses struggle with fragmented coordination between development, security, and operations teams, often deploying new tools without proper governance. To address these gaps, Info-Tech proposes a three-phase strategy: identifying business-critical capabilities, assessing current maturity levels, and developing a risk-aligned roadmap. This process includes the use of a new blueprint and a proprietary Capabilities Assessment Tool designed to help leaders prioritize investments based on actual business value rather than reactive patching. By integrating automation with human expertise, companies can better align their security posture with the realities of high-speed, AI-driven software delivery.