(Security) Culture Eats Strategy For Breakfast

A strategy is important to the growth and maturation of your AppSec program. But culture is ultimately what drives results. It's crucial to establish a security culture across the organization to ensure that everyone understands the importance of security and its role in protecting the company's assets. Security Champions are key to promoting a security culture within development teams. They do not need to be experts in application security. But they can grow their interest in security and can help raise awareness and educate their peers about security best practices.

Having Security Champions in place can accelerate the improvement of the security posture by assisting in the execution of the Application Security strategy. It also leads to more efficient use of resources by allowing security professionals to focus on higher risk issues.

In this presentation, we will cover not only the importance of security culture, but the process of establishing a Security Champions program in your organization. We will cover topics such as identifying potential Champions within development teams, providing them with the necessary training and resources, and establishing a clear framework for their role and responsibilities. Then we will go over measuring the success of the Security Champions program.