Security Champions: Drive Innovation by Creating Future Cyber Workforce
summary
Proposal: build a security champions program that turns one nominee per scrum into a trained, accountable security role using the NIST NICE framework and a 70-20-10 learning mix. The program defines three champion levels, eight strategic pillars (guardrails not gatekeeping), and career paths, drives metrics like increased remediated vulnerabilities and fewer identified reworks, and hits roughly 50% optimization in pilot teams. Concrete outputs: virtual talent pool, guidelines, tool access, and executive-aligned KPIs; pilots expand after three to six months.
AI-written summary · about
chapters (17)
- 0:00RSAConference2021
- 2:20THE PROBLEM DEVOPS & SECURITY CHALLENGES
- 5:52SECURITY IS A PEOPLE & PROCESS PROBLEM!
- 9:04THE RESOLUTION : PEOPLE CENTRIC STRATEGY
- 10:33DEVSECOPS CULTURE ENABLEMENT PROGRAM - THE STRATEGY
- 11:50THE CHAMPIONS : DRIVERS OF CHANGE
- 13:17HOW DO THEY BREAK THE SILOS
- 14:19SECURITY CHAMPIONS & SECURITY COUNTERPARTS
- 17:36EMPOWERMENT-PILLARS FOR PEOPLE ENABLEMENT
- 22:57MANAGEMENT DRIVEN
- 24:29CONTINUOUS IMPROVEMENT
- 25:37REWARDS & RECOGNITION
- 27:12DIVERSITY & INCLUSION
- 28:17DEVSECOPS MATURITY MODEL
- 29:39REVISITING THE STRATEGY
- 31:22REVISITING KEY ENABLERS
- 34:44APPLY WHAT YOU HAVE LEARNT TODAY
related talks
37mBuilding Security Champions
27mSecurity Champions: The What, Why, and How
32mBeyond training: Building a high-impact security champions program
32mSecurity Champions? Introduce them in your Organisation
49mTransforming Security Champions
51mBuilding Security Champions
36mChampioning Security: Scaling Security at Every Level
48mGrowing A Security Champion Program Into A Security Powerhouse