Developing Secure Software

As is the buzz word today 'security' is part and parcel of any IT related activity. As developers we as yet were more or less happy making sure that you wrote good code which passed basic tests such as memory leaks....

The time has now come for having procticves in place which ensure that the code written is secure and certify it as such.

What should be the steps in going about doing this. How does one formulate a process, who would be the best person to do such code reviews. Are there any standards prescribed for such reviews. What all should one check for...