A DevSecOps Journey with security champions
summary
Builds a company-wide Security Champions program at Worldline that puts specific practices into code: 12 champions across 8 teams run biweekly threat‑modeling workshops and pair on pull requests, while pipeline gates enforce SAST and dependency scanning in CI. The result is an operational community that shifts left security checks, cuts review backlog and moves remediation from weeks to days, and treats security as a measurable engineering workflow rather than a separate checklist.
AI-written summary · about
chapters (7)
- 0:00Introduction and welcome
- 1:49Security champions concept
- 10:11Challenges in DevSecOps adoption
- 16:00Code quality and financial impact
- 21:40Code review and scope definition
- 26:10Security champions role and impact
- 30:23Online presence and conclusion
related talks
38mChampioning Security for your Agile Development
31mDevSecOps, or How to Integrate Security into DevOps Practices
32mSecurity Champions? Introduce them in your Organisation
32mBeyond training: Building a high-impact security champions program
35mSDL at Scale: Growing Security Champions
53mFrom DevOps to DevSecOps
36mOD approach to the champions dilemma
47mElite Security Champions Build Strong Security Culture in a DevSecOps World