AppSec is critical to software purchasing decisions

A survey by Checkmarx reveals that 24% of CISOs consider application security (AppSec) as always critical in their purchasing decisions, with Europe leading at 58%. As responsibility for security shifts toward development teams, funding and influence also move there, emphasizing the need for CISOs to lead through frameworks rather than micromanagement. While many report AppSec metrics to boards, fewer connect these to business outcomes like brand reputation or regulation. This highlights the importance of CISOs framing security as integral to overall risk management, bridging the gap between technical concerns and strategic business goals.