Aim-Ready-Fire
summary
Panel gives concrete takeaways: surveys show almost 50 percent of IT executives refuse to buy application security, teams use OWASP Top 10, WebGoat, OpenSAMM and Microsoft SDL, and require vendor clauses that force vendors to fix flaws at their cost. Programs use VCP vendor classification, pentest reports, ISO/27001 and SAS‑style audits, and one‑day developer training split into one-day developer training halves. A $30M product budget and real failures like Night Capital $400M bad deploy drive adoption; reusable platforms and early POC security pay off.
AI-written summary · about
chapters (5)
- 0:00Start
- 4:32What Are the Biggest Challenges That You Are Having To Get Trustworthy Hardware and Software in Your Enterprise
- 36:46Managing Supply Chain Risks
- 38:21How Do You Define the Requirements by the Actual Reality
- 38:56What Is Your Biggest Threat as Financial Services
related talks
36m5 Steps to Drive Enterprise Software Security
50mThe Application Security State of the Union
57mThe Developer's Field Guide to Software Security
26mHow to Build an Application Security Program
37mDeploying Security Testing Practice in Your Team and Company
50mRunning in the Shadow: Perspectives on Securing the Software Supply Chain
39mFrom Auditions to Opening Night: Selecting Security Tools that... (Saurabh Sharma)
49mPragmatic Approaches To Building Secure Software