BCC Risk Advisory was founded in 2011 out of frustration with the direction the security industry was taking. Developing secure robust systems can be easier than one thinks assuming one knows what the potential security issues are. It's my view that there was always a disconnect with security folks and the people developing and maintaining systems. In order to help bridge this gap They instil a development culture in all Their engineers and consultants; "Don't be afraid to experiment, fail, learn and repeat". Many of Their staff have a development background and/or are certified developers of one kind or another. In order to help secure systems They need to embrace the "builder" (developer) mentality, understand pitfalls and also provide pragmatic advice and assistance. They are keen to empower developers and businesses alike with the correct knowledge and understanding of the risks associated with doing business on the Internet. Communication and a common language is of key importance when helping to address system security.