The book is well worth reading, but knowledge is not action. Microsoft learned the lessons of writing secure code in the school of hard knocks . And translated that learning into a change of behavior that has had positive results . It makes me rather
