Scaling Security in Agile Scrum
Talkat AppSec California 2015 · on Wednesday, 2015-01-28· at 15:00· Annenberg Community Beach House: Track 1, 415 Pacific Coast Hwy·
summary
Case study claims a working process for ~ten Scrum teams that shifts security earlier into backlog grooming and hands routine checks to embedded security Champions who total 15 to 20 volunteers, not full time hires. Automation replaces manual scans with a Jenkins plugin and Jira integration so scans, ticket creation and sandbox runs happen inside developer workflows. Result is fewer late surprises, faster fixes and scalable coverage, with remaining issues around training, complex teams and continuous deployment pressure.
AI-written summary · about
chapters (9)
- 0:00Start
- 2:30The App Debt Priority Survey
- 8:04Daily Scrum
- 12:36Product Backlog
- 13:05Sprint Backlog
- 17:29Single Point of Failure
- 30:48How Do We Build Security Expert
- 31:48Goals of this Program Initiatives
- 40:14Challenges
related talks
46mApplication Security in an Agile World
45mAgile Security Testing - Lessons Learned
50mCase Study: 10 Steps to Agile Development without Compromising Enterprise Security
38mChampioning Security for your Agile Development
57mAgile Application Security
28mSecurity as a Service: Work where You Engineers Live
46mMaking Security Agile
01h 04mShifting Security Everywhere