Chapter 12. Why You Need a Practical Security Champions Program
Michael Xin and Sandeep Kumar Singh
As a security professional, you may have been challenged by application teams that couldn’t make your priority their priority, and security controls in the software development process that were not as great as you wanted. You may want to test out Security Champions practices! A Security Champions program is an effective way to scale and distribute security across development teams. A Security Champions program is a collaboration between a security team, development teams, and an executive sponsor who supports and promotes the program. High-performing individuals within development teams are nominated as Security Champions, undergoing additional security training to act as ambassadors for security.
The Security Champion program offers several benefits. It improves security awareness and the adoption of secure coding practices during software development. It also enhances collaboration and knowledge-sharing between security champions and the security team, resulting in more effective security reviews and testing. Additionally, it improves the working relationship between the security and engineering teams, fostering a culture of continuous improvement and integration of security measures. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access