Whether an organisation builds software itself, integrates third party software or just procures a solution, the risks of a poorly secured system will ultimately have a significant impact on the business. Secure systems development is not always something that gets prioritised against the need to get to market quickly or reduce costs, unless of course the business truly understands the risks. This article covers the risks arising from poor secure systems development, in which the authors look at the potential impact on the business and then outline some of the current key practices that can be adopted to mitigate these.