Cultivating a Security-First Culture in Tech Organizations
summary
Panel describes concrete practices and examples: Colonial Pipeline and Uber breaches as root‑cause stories, GitHub and VS tooling for library vuln alerts, use of security champions per team to avoid central bottlenecks, and gamified phishing with time‑off rewards to drive awareness. Claims about Ubuntu include Ubuntu Pro 12‑year patches and built‑in vuln notifications for containers. If wanting actionable processes, roles, and tooling rather than high‑level rhetoric, this session delivers.
AI-written summary · about
chapters (7)
- 0:00Security-First Culture intro
- 11:44Why security matters now
- 20:22Security training programs
- 27:52Security champions role
- 33:41Executive buy-in for security
- 41:31Ubuntu secure containers
- 44:19Future security trends
related talks
20mBuilding security culture on infrastructure teams
24mConcrete Steps to Create a Security Culture
38mPrioritizing Trust While Creating Applications
37mSecurity Culture Hacking: Disrupting the Security Status Quo
27mSecurity: The Thing That Everyone...
31mPrioritizing Trust while Creating Applications
25mWhat Does it Mean to Build a Proactive Security...
48mHow to build a security mindset