AppSec Guide and CISO Survey
summary
OWASP publishes a CISO guide and runs a ~100+ CISO survey that claims application risks dominate risk portfolios and are rising: responders allocate ~70–80% of threats to applications and two thirds report increases year over year. Top worries are lack of awareness, insecure SD practices and poor testing; budget ranks fourth. Only 27% say strategies cover mobile/cloud. Having a two‑year security strategy correlates with increased appsec funding. OWASP Top Ten and short guides rank highest for practical use.
AI-written summary · about
chapters (24)
- 0:00Intro
- 0:47Agenda
- 2:45How we started
- 5:37Awareness gap
- 8:24Development process
- 10:55Methodology
- 12:26External Threats on the Rise
- 13:09Application Specific Risks and Threats
- 14:16Trend
- 15:05Threats
- 16:24Investment Strategy
- 17:10Investment Priorities
- 18:08Security Strategy
- 24:28Application Security Management
- 25:37Top 5 Challenges
- 26:36Top 5 Useful Projects
- 28:06CISO Guide
- 28:56Awareness Slide
- 30:03How much do you need to invest
- 30:27What about risk management
- 31:03Compliance
- 31:32Business Case
- 32:11Guide Structure
- 35:43Additional References
related talks
50mThe Application Security State of the Union
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
49mKeynote: CISO Perspectives
40mAppSec’s Future and the Rise of the Chief Product Security Officer
30mTop 10 Introduction
47mOWASP Top 10
43mFrom OWASP top 10 to Secure Applications
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time