Security Champions Program: Scaling Up Cybersecurity Expertise - The What, Why, and How

Discover the importance of Security Champions programs in cybersecurity strategy through this informative conference talk. Learn about the increasing prevalence of known vulnerabilities, especially in open source software, and the significant costs associated with data breaches. Explore the concept of scaling up security expertise within technical teams to address cybersecurity challenges effectively. Gain insights into establishing a Security Champions program, including practical implementation steps, realistic costs, and expected benefits. Understand the role of Security Champions in addressing compliance fatigue and improving overall security posture. Delve into topics such as secure engineering guilds, communication channels, global team management, and training funding. Walk away with key takeaways to enhance your organization's cybersecurity approach and better protect against evolving threats in the cloud-native landscape.

Intro
COST OF A DATA BREACH
OPEN SOURCE SOFTWARE?
CLOUD NATIVE?
SECURITY IS OFTEN NEGLECTED IN TRANSFORMATIONS
WE NEED TO UP OUR GAME
WHAT MOTIVATED US?
LOG4SHELL VULNERABILITY
WHY DO WE NEED
WHAT ARE SECURITY
SECURITY FOCAL SECURITY CHAMPION Security Focal
STARTA SECURITY CHAMPIONS PROGRAM
PROGRAM DESCRIPTION HIGHLIGHTS
SECURE ENGINEERING GUILD
COMMUNICATION CHANNELS
GLOBAL TEAMS
TRAINING FUNDING
COMPLIANCE FATIGUE
IBM DIGITAL
KEY TAKE AWAYS