Redirecting you to Reddit in 5 seconds:
https://old.reddit.com/r/netsec/comments/1cn4ge7/redefining_roles_in_application_security