The Four Tribes of Security Champions
summary
Framework claims that security champion programs fall into four practical types — The Apprentices, The Learners, The Fan Club, The Sentinels — and recommends picking one by matching program goals to existing company culture (using Lance Hayden’s competing cultures lens). Concrete tools include a benchmarking checklist, heat maps of team coverage, job‑description obligations, incident response training cohorts with Slack channels, CTFs and threat‑modeling options, and reward schemes (SAPS). Ten years of practitioner research shows picking the right tribe predicts program success.
AI-written summary · about
chapters (12)
- 0:00Introduction and welcome
- 1:04About the speaker
- 4:58Why security champions matter
- 9:16Understanding security culture
- 13:10The four tribes framework
- 18:47Research gaps and OASP project
- 20:09Apprentices tribe explained
- 21:12Learners tribe explained
- 21:57Fan club tribe explained
- 22:39Sentinels tribe explained
- 25:01Finding your tribe
- 26:47Key takeaways and conclusion
related talks
49mTransforming Security Champions
32mBeyond training: Building a high-impact security champions program
36mChampioning Security: Scaling Security at Every Level
51mBuilding Security Champions
40mSecurity Champions: Drive Innovation by Creating Future Cyber Workforce
37mBuilding Security Champions
48mGrowing A Security Champion Program Into A Security Powerhouse
32mSecurity Champions? Introduce them in your Organisation