The building blocks of a culture of security
summary
Explains how security becomes company-wide by showing concrete practices: builds a GenAI platform called GenOS and ships it in under a year by reusing security foundations; runs a transparent COE process and weekly CEO-led security reviews; responds to Log4j with Corretto tooling and patched Amazon in 72 hours; keeps a prioritized risk register and uses a guardians program that makes teams 20% faster with 22% fewer findings.
AI-written summary · about
chapters (17)
- 0:00Introduction to panel
- 4:13Defining security culture
- 6:50Why security matters
- 9:02Aligning security and business
- 10:47Evolution of security ownership
- 13:40Security as a product
- 18:13Executive support for security
- 21:29Risk management strategies
- 24:15Accountability and transparency
- 27:52Leadership principles
- 30:56Localized decision making
- 36:22Security guardians program
- 42:34Fostering psychological safety
- 46:26Building a security community
- 49:35Rewarding positive behavior
- 52:27Empowering language and closing
- 55:22Key takeaways
related talks
20mBuilding security culture on infrastructure teams
24mConcrete Steps to Create a Security Culture
53mWe Come Bearing Gifts: Enabling Product Security with Culture and Cloud
24mBeing secure by design: Engineer-led security
38mBuilding Security at Speed
40mSix Years in Review: Transforming Company Culture to Embrace Risk
25mWhat Does it Mean to Build a Proactive Security...
20mSecurity Culture & Scaling Your Security Humans