Explore strategies for elevating security by leading without authority in this 39-minute OWASP Foundation conference talk. Discover how to be powerful while powerless as the sole member of a security team, tackling extensive responsibilities and challenges. Learn technical approaches such as shifting left, writing code, automating processes, and implementing vulnerability management. Gain insights into cultural strategies, including identifying key stakeholders, maintaining authenticity, and teaching diverse classes. Examine real-world examples of success, like reducing phishing email clicks and collaborating effectively with engineers. Address the complexities of security leadership, including conflict resolution, priority management, and navigating difficult situations in both on-premises and cloud environments.
Being Powerful While Powerless - Elevating Security By Leading Without Authority