Why Does Friction Arise?
Different teams are incentivized differently. Developers are incentivized to ship new features and build systems that are reliable, high-performing, and low-cost. Security teams are incentivized to minimize incidents and ensure everything conforms to strict protocols. This disparity creates a systematic tension. Development teams are under pressure to write code and deliver it to the market as quickly as possible. Anything that slows delivery is seen as a hindrance to productivity and success. Security teams, on the other hand, are under pressure to ensure products reach the market without flaws or vulnerabilities that could lead to breaches. Their security-first philosophy can be perceived as obstructive to rapid delivery.