Organizations are experiencing increasingly more security scrutiny from their customers. Vendor security questionnaires are lengthy and diverse. This leaves many security shops scratching their heads, wondering how to implement their security programs in a manner that will satisfy the demands of all of their customers. This talk will look at various strategies for implementing application security that will stand up to the scrutiny of the most intense vendor security programs.