Reality Checking Your AppSec Program

Reality Checking Your AppSec Program

Explore key insights into effective application security program management in this 25-minute conference talk from GrrCon 2016. Delve into topics such as compliance, diminishing returns, maturity versus security, the limitations of aggregates, the importance of comprehensive education beyond training, human factors in security, outcome-based approaches, and the distinction between verification and validation. Gain practical advice on improving your AppSec program and learn how to critically evaluate its effectiveness beyond traditional metrics and assumptions.