Главная
Study mode:
on
1
Succeeding with Enterprise Software Security Key Performance Indicators
2
KPI = Key Performance Indicator
3
A key performance indicator (KPI) is a measure of performance, commonly used to help an organization define and evaluate how successful it is, typically in terms of making progress towards its long-t…
4
Show relative distance to a goal
5
Establish relevance to org
6
Establish relevance to security
7
A: Implemented mandatory testing
8
Relative distance to goal Relevance to organization Relevance to security
9
Security items (examples) static analysis process dynamic analysis process integrating testing tools developer awareness
10
Impact of a security item to the release timeline
11
Security items (examples) integrating security testing early in development providing templates for 'fixes' defining pre-built code modules
12
Impact of a security item to the uptime of the application/service
13
Security items (examples) continuous security monitoring continuous/regular testing remediation of exploitable vulns
14
Security items (examples) mandatory peer review of code required stage-gates to production w/security sign*-off accountability by LOB VP
15
Minimize injection (A1) defects in new software releases
16
Follow the wh1t3rabbit.
Description:
Learn how to implement effective Key Performance Indicators (KPIs) for enterprise software security in this 58-minute conference talk from BSides Nashville 2014. Explore the importance of KPIs in measuring organizational success and progress towards long-term goals. Discover how to establish relevant security metrics, including implemented mandatory testing, static and dynamic analysis processes, and developer awareness. Examine the impact of security measures on release timelines and application uptime. Gain insights into integrating security testing early in development, providing fix templates, and implementing continuous security monitoring. Understand the value of mandatory peer code reviews, security sign-offs, and accountability measures. Apply these strategies to minimize injection defects and enhance overall software security in your enterprise.

Succeeding with Enterprise Software Security Key Performance Indicators

Add to list
#Information Security (InfoSec) #Cybersecurity #Software Security #Business #Key Performance Indicators #Computer Science #DevOps #Continuous Monitoring #Programming #Software Development #Software Testing #Security Testing #Dynamic Analysis #Static Analysis #Business Software #Enterprise Software
0:00 / 0:00
1 of 16

Succeeding with Enterprise Software Security Key Performance Indicators