The convergence of responsibility for any organization defining their application security should result in an operational state where every task or test ensures that all software releases are secure.