Secure Development Practices at SberTech
summary
Covers integrating secure development practices into the software lifecycle at SberTech, describing the technological stack and how services are positioned within the enterprise. Explains concrete methods used to engage developers in security tasks and the applied processes for embedding security across development.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:12Sberbank security model
- 4:04Security team setup
- 6:54Methodology and practices
- 9:25Competency management
- 13:45Threat models and analysis
- 18:02Security portal
- 19:59Project implementation case
- 25:38Approach evolution
- 27:08Q&A
related talks
48mSecurity Basics for Developers (and Not Only Developers)
23mContinuous Security
27mSecurity by Design
49mThe Secure Software Supply Chain
01h 00mImproving the Chances of Success in Secure Software Development
44mSecurity Practices Useful in Agile Development
56mSo Long Secure Coding - Practical Steps for Securing the entire SDLC
49mSite Reliability Engineering and the Security Team They Love