AppSec California 2016

Organization are exposed to breaches and unnecessary risk because security is often a secondary concern during software requirements development. Many times organizational culture or politics can present more daunting challenges than purely technical issues when implementing a software security initiative. You can change the way your organization builds software by learning the principles, processes, and pitfalls of building a software security initiative in the enterprise. A five step disciplined approach of Characterizing the Landscape, Securing Champions, Defining Standards and Strategy, Executing the Initiative and Sustaining the Effort, tailored to your organization, will help ensure that your corporate-wide efforts to secure applications are as productive as possible.