Great Security Is One Question Away
summary
Argues that asking a single CIA question — how can confidentiality, integrity or availability be broken — converts endless vulnerability lists into concrete design checks and lets teams shift security left. Recommends practical steps: add a security section to solution docs and RFCs, run cross‑discipline CIA discussions during design, and treat availability risks like third‑party feature‑flag outages as design issues rather than ops surprises. Results: cheaper fixes earlier and fewer last‑minute blocking bugs.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 4:11Security is overwhelming
- 8:57CIA Triad explained
- 13:44Ask the CIA question
- 16:34When to use CIA Triad
- 19:49Shift security left
- 22:45Closing thoughts
related talks
37mSecurity Doesn't Have To Be a Nightmare
23mSecurity Doesn't Have To Be a Nightmare
37mSecurity Doesn’t Have To Be a Nightmare
01h 17mSecure by Design - Security Principles for the Working Architect
51mThinking Differently About Security
33mInterview with
45mSecurity Architecture, An Adventure?
36mSaaC – Security as a Culture, the Distributed Advocacy