Presentation: Security Champions: Only YOU Can Prevent File Forgery

One of the aspects that I work on is a program called Security Champions. It's a really exciting way for people outside of their Product Security team to get involved and be I think more interesting parts of security which is the actual developing code in a secure way. For this program we have nominated one security champion per product and that person goes through a process of training with me to become the advocate for security in their organization. Through that process it's a great way for this individual to get more skills enhancement and security and become more of a key player in the product development. As the security team introduces more security requirements into the product development lifecycle that person becomes a key player in helping to execute on those security requirements and becomes more of a champion and an advocate on their team to help the product team get through those security requirements successfully so that there's no delay on release, that there isn't any freeze security vulnerability remediation that needs to happen.

The audience that I envision is developers, somebody that is senior enough to be able to speak to how changes in features and requirements affect change in the product. I am hoping to convince people to become security champions, and take the advice and the process that I've created and take it into your team as a developer and become a security champion. I'll talk about either how to request that a Security Champion's program is built among your security team, or if your company doesn't have the security team to support a Security Champion's program, how you can be like an army of one in your organization without the support of the security team. I'll give you the step by step guide for what you should be looking out for to be that security champion even without the support.