If you're worried about not being able to get access to "security people", I'd recommend looking at OWASP (http://www.owasp.org http://www.owasp.org) which has

If you're worried about not being able to get access to "security people", I'd recommend looking at OWASP (http://www.owasp.org http://www.owasp.org) which has a lot of good free information and also chapter meet-ups which are free. Interestingly one of the problems I've faced running an OWASP chapter is how to get more developers along to it. Also security.stackexchange.com can be quite useful