Overcoming Obstacles in Operationalizing Security
summary
Creates a 30/60/90 roadmap and immediately hits a negative slope: resources don’t arrive fast enough and capability lags. Builds crude automation with JIRA workflows and spreadsheets to handle onboarding/offboarding, publishes regular security advisories, and rolls out a ten-step user security checklist plus in-house awareness training instead of buying a course. Negotiates an access-control deal, automates static-analysis for frequent bugs, and uses DLP reminders as a behavioral nudge — pragmatic trades that work well at startup scale.
AI-written summary · about
chapters (6)
- 0:00Introduction and context
- 1:06Why this talk matters
- 10:03Picking your security battles
- 17:26Finding allies and gaps
- 27:06Build what you must
- 32:20Q&A on hiring and retention
related talks
31mStartup Security, 2nd Edition
24mConcrete Steps to Create a Security Culture
19mSo You’re the First Security Hire
52mContinuous Security
31mHow to get everyone to get on board with software security: practical tips and suggestions.
34mEmbarking on Your Security Journey
20mBuilding security culture on infrastructure teams
01h 04mShifting Security Everywhere