Application security is an issue practitioners have chosen to defer to the operations group. The rationale is multi-faceted and includes issues such as: lack of skills, lack of time, and lack of support by upper management. In this Market Commentary, we examine the six truisms that must occur to make the practice of application security a reality.