DevSecOps – The synergy between security education and security champions
summary
Argues for a mandatory basic security "driver's license" for engineers, citing a 3.4 million cybersecurity workforce gap and Gartner's prediction that skills shortfall causes >50% of major incidents by 2025. Recommends practical, continuous training platforms that are Hands-On, bite-sized and company-paid, mapped to roles and tied to process changes like granting team autonomy after certification. Promotes a scalable security Champions program and points to the OAS security Champions guide as a practical starting resource.
AI-written summary · about
chapters (10)
- 0:00DevSecOps and security education
- 1:51Waterfall to DevSecOps
- 4:02Key ingredients for DevSecOps
- 7:19Security driver's license
- 9:49Cybersecurity talent challenges
- 10:36Why e-learning fails
- 12:02Effective security education
- 16:20Security champions role
- 18:29Integrating security education
- 21:01Summary
related talks
37mBuilding Security Champions
27mSecurity Champions: The What, Why, and How
47mSecurity is Everybody's Job
40mSecurity Champions: Drive Innovation by Creating Future Cyber Workforce
01h 02mDevSecOps for Developers: How To Start
31mDevSecOps, or How to Integrate Security into DevOps Practices
51mBuilding Security Champions
06mDevSecOps is a Misnomer