Application Security – It’s Not Just for Developers Anymore

No ratings

Presented at SourceBoston 2018 by

Danny Harris

Application security has traditionally fallen on the shoulders of development and IT teams as organizations tend to view it as a technology issue. However, due to the inherent financial and operational risk software applications bring to the enterprise, organizations are rethinking their approach.Application security is considered a topic for technical people, and business leaders play a pivotal role in its success at their organizations. The responsibilities for application security are no longer just for the technical team, but executives also need to understand security risk and the secure software development lifecycle to ensure the delivery of secure and robust applications.This talk discusses how application security has become a business risk management concern,and examines the gap between an organization’s perceived and actual security efforts. Additionally, it describes security challenges throughout the software development lifecycle (SDLC) and high-impact activities for various roles that will provide the foundation for a sustainable application security program.