Chapter 12. Why You Need a Practical Security Champions Program
Michael Xin and Sandeep Kumar Singh
As a security professional, you may have been challenged by application teams that couldn’t make your priority their priority, and security controls in the software development process that were not as great as you wanted. You may want to test out Security Champions practices! A Security Champions program is an effective way to scale and distribute security across development teams. A Security Champions program is a collaboration between a security team, development teams, and an executive sponsor who supports and promotes the program. High-performing individuals within development teams are nominated as Security Champions, undergoing additional security training to act as ambassadors for security.
The Security Champion program offers several benefits. It improves security awareness and the adoption of secure coding practices during software development. It also enhances collaboration and knowledge-sharing between security champions and the security team, resulting in more effective security reviews and testing. Additionally, it improves the working relationship between the security and engineering teams, fostering a culture of continuous improvement and integration of security measures. ...
Get 97 Things Every Application Security Professional Should Know now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
