Building Secure Cultures
summary
Covers concrete practices and results: how Slack pairs a self-service SDL with a six-question risk quiz, generates Trello+Slack checklists, and runs a bot to nudge teams — plus the surprising dollar figure $177,000 in bounties paid. Describes tools used (static analysis, fuzzing with American fuzzy Lop, telemetry), historical incidents (Code Red, Microsoft patch process) and whether the process scales down to fast-release teams.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:41Leigh Honeywell
- 1:19The Red Worm
- 7:27What Can We Do
- 11:51Organizational Processes
- 15:35Component Survey
- 18:35Checklist
- 20:19Why this matters
related talks
42mMoving Fast and Securing Things
45mHow Leading Companies Are Scaling Their Security
20mBuilding security culture on infrastructure teams
30mSecurity by Stealth
35mSecurity Culture: Why is it important?
24mConcrete Steps to Create a Security Culture
52mLeveraging Psychological Needs For Building A Security Culture Amongst Developers
37mSecurity Culture Hacking: Disrupting the Security Status Quo