This is a similar issue to cybersecurity in new product development. We’ve been working for years to inject a security mindset into the development process from the beginning, but too often we still see new products, esp. on the web, that are full of holes in order to speed to market. I’m glad to see the problem isn’t unique to IT.
When you get it all secure, let us know, and we’ll un-corrupt the government. ;)