Championing Security for your Agile Development
summary
Designed a Security Champion Program that runs across ~200 teams / ~3000 developers and integrates threat modeling, SCA/SAST/container scans, secrets managers, SBOMs and infra-as-code into agile rituals and the project dashboard. Threat modeling shortens to 45–90 minutes for feature and project work, the program surfaces hundreds of threats which are triaged on DevOps boards, most high‑critical issues get fixed, SecChamps become local POCs and adoption shifts from a pushed to a pulled model.
AI-written summary · about
chapters (10)
- 0:00Start
- 13:52Leveraging the Agile Rituals Tools
- 14:36Leveraging the Project Dashboard
- 16:14Security for CI/CD
- 18:59Security as part of Development Process
- 22:27Security Roadmap
- 24:16Security as part of Mindset
- 29:06Designing Security Program with Agile in mind
- 31:45Security Maturity for Dev Teams
- 36:27Championing Security with the Agile Mindset
related talks
27mSecurity Champions: The What, Why, and How
48mGrowing A Security Champion Program Into A Security Powerhouse
01h 01mSecurity Champion Worst Practices
54mScaling Security in Agile Scrum
32mBeyond training: Building a high-impact security champions program
36mChampioning Security: Scaling Security at Every Level
01h 04mShifting Security Everywhere
32mSecurity Champions? Introduce them in your Organisation