Why Unleashing Your Software Security Potential is Necessary & How to Achieve It
summary
A German study of app teams collects 256 survey responses and 13 interviews and finds only one third of developers report having security actions in place, one third have practical competence across eight of ten topics, and one in five products never undergoes any security analysis. Teams overwhelmingly (89%) request training, so role-specific programs are developed — a 13-week champion training (≈100 hours) and a 20-hour manager course — plus a cost‑prioritized maturity model, security belts on GitHub, to raise competence stepwise.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:38Welcome
- 0:54Fatal Consequences
- 2:06Examples
- 4:49We unconsciously struggle
- 5:44Lack of practical competencies
- 7:11Lack of security awareness
- 9:30Study conclusion
- 11:35Security Champion
- 13:51Training
- 15:06Manager
- 16:37Security Belts
related talks
01h 00mImproving the Chances of Success in Secure Software Development
26mHow to Build an Application Security Program
56mSo Long Secure Coding - Practical Steps for Securing the entire SDLC
36m5 Steps to Drive Enterprise Software Security
47mSecurity is Everybody's Job
33mCan AppSec Training Really make a smart developer
39mAppSec Survey 2.0 : FineTuning an AppSec Training Program Based on Data cut
24mConcrete Steps to Create a Security Culture