Real-World Security Implementations and Key Lessons
summary
Panelists report concrete effects not platitudes: DOS attacks surge, quarterly password rotation weakens real auth, and AI causes data leaks — Deepseek data exfiltration is cited as an example. Open-source projects lack telemetry and require defensive imagination; HS2.is protects 2.5 billion users is presented as a real-world scale case. Teams use OSS scanners, device isolation and central tooling with security champions, claiming 70–80% mapping between standards; one bank has one bank has 100 security staff. Advice: do a risk assessment, fix the highest risks, and apply defense in depth.
AI-written summary · about
chapters (17)
- 0:00Welcome
- 1:16Expert backgrounds
- 3:05Financial security challenges
- 5:34Public safety mindset
- 7:20Open-source security risks
- 9:03AI risks and misuse
- 11:53Security vs functionality
- 13:58Zero trust adoption gaps
- 17:05Global regulation compliance
- 20:18Regulated environment challenges
- 24:30Legal-compliance-security teams
- 27:23Shift left security
- 30:40Security in agile teams
- 33:09Shift left limits
- 35:38Regulation vs innovation
- 37:49Regulation as business asset
- 39:17Key takeaways
