OD approach to the champions dilemma
summary
An organizational development program adds the missing glue: mandates no code into production without security review, embeds security across design implementation testing and follow‑up, and requires routine daily code reviews plus automated dependency checking with human interpretation. It builds searchable developer documentation and separates basic training from advanced topics, plus appoints four champion roles (reviewer, design, DevOps, test) and relies on tools like security knowledge framework (SKF) to operationalize the model.
AI-written summary · about
chapters (4)
related talks
44mFrom Rogue One to Rebel Alliance: Building Developers into Security Champions
32mSecurity Champions? Introduce them in your Organisation
51mBuilding Security Champions
38mChampioning Security for your Agile Development
47mElite Security Champions Build Strong Security Culture in a DevSecOps World
33mA DevSecOps Journey with security champions
36mChampioning Security: Scaling Security at Every Level
54mSDL at Scale: Growing Security Champions