5 Steps to Drive Enterprise Software Security

Learn a five-step disciplined approach to drive enterprise software security in this conference talk from AppSec California 2016. Explore how to characterize the landscape, secure champions, define standards and strategy, execute initiatives, and sustain efforts to improve organizational software security. Discover strategies for overcoming cultural and political challenges that often surpass technical issues when implementing security initiatives. Gain insights on changing the way your organization builds software, ensuring that corporate-wide efforts to secure applications are as productive as possible. The speaker, John Dickson, a Principal at Denim Group and internationally recognized security leader, shares his expertise on launching and expanding critical application security initiatives in Fortune 500 companies and government organizations.

Intro
Introduction
First day of school
The problem
The incumbent spin
Most apps tech programs fail
Define the landscape
Compliance frameworks
Cultural drivers
Protos principle
Gap analysis
Identify gaps
Secure Champions
Strategies and Standards
PCI DSS
Questions Answers