Security Testing

["Ramirez, Manuel N (CORP, DDEMESIS)" <Manuel.Ramirez () ddemesis ge com>]

Hi everybody,
I was wondering if some of you have some papers regarding web applications security testing. I'm working on a CMM 
iniciative and we are planning to include a security testing phase so every new developed application is security-error 
free. 

Would you recommend every development team to perform security testing or it's better to have a group of experienced 
people doing these activities for all of the developed applications?

Best regards,
Manuel