Ok. You finally got your first big breach. Everybody knew it was only a question of when not if. So now your Exec Management team is pretty upset, your customers worried, your employees confused, your CEO has you on speed dial and you get the “pleasure” of daily and then weekly briefings on fixing everything and what you do to make sure this never happens again. So, review everything, lots of policies and SDLC to write. Forget your plans for a nice summer holiday next month. Or maybe not? Setting up, managing and improving your global information security organisation, there are many mature OWASP projects and tools that can help. Achieve cost-effective application security and bring it all together on the management level. A journey through different organisational stages and how OWASP tools help organisations to move forward improving their web and application security. This talk will discuss a number of quick wins and how to effectively manage global security initiatives and use OWASP tools inside your organisation.