AppSec Meets Project Management: Hacking the Frameworks for Secure Software
summary
Compares concrete framework fit and gaps: PMBOK/PMI treats security appears 17 times in PMBOK and only once as “information security,” while PMI’s acquisition of Disciplined Agile and SAFe add practical touch points. Demonstrates a ROSI calculation using a $1,000,000 incident with 0.4 probability → $400,000 expected loss and an $880,000 estimated return after mitigation. Describes building a software Factory for switchable compliance, notes where tooling, measurable probabilities, and integration points actually succeed or still fail.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:04Cybersecurity strategies and frameworks
- 6:23Security vs project management frameworks
- 10:19Project management frameworks for security
- 13:33PMI and security frameworks
- 17:25Six Sigma and SAFe for security
- 22:02Gaps in security integration
- 23:31Security requirements challenges
- 26:01Business vision in security
- 27:49Return on Security Investment
- 31:04Streamlining security regulations
- 31:46Early security integration
related talks
41mAim-Ready-Fire
46mJuggling the Elephants: Making AppSec a Continuous Program
01h 03mSeven Security Sins: the seven biggest Security Problems of agile Projects
01h 00mSAMM Project
45mApplication security loves Agile
01h 00mImproving the Chances of Success in Secure Software Development
08mRunning an Appsec Program with Open Source Projects"
36m5 Steps to Drive Enterprise Software Security