The not-so-secret diary of building Visa's Security Champion program
summary
Visa's 'Security Champions Program' chronicles a concrete 14‑month effort that recruits voluntary champions across ~400 staff to fix a 5‑person AppSec bottleneck against 200+ developers, wins leadership buy‑in, and carves out up to 10% time for champion duties. Training, biannual surveys and a security Champions teams Channel in Microsoft Teams sustain engagement; perks include tickets to oos 2023. The program delegates tasks, speeds expedited security assessments and demonstrably reduces compliance and review bottlenecks.
AI-written summary · about
chapters (15)
- 0:00Security Champion program intro
- 3:51What is a Champion program
- 6:00Why Visa needed it
- 7:04Common pitfalls in programs
- 8:30Recruiting Champions
- 10:17Core pillars after recruitment
- 10:59Leadership support role
- 14:08Training Champions effectively
- 16:13Soft skills for Champions
- 18:39Keeping Champions engaged
- 21:06Targeted training and incidents
- 23:15Spotlight and recognition
- 26:22Lessons and obstacles
- 28:08Impact on Visa’s security
- 29:32Future plans and closing
related talks
36mChampioning Security: Scaling Security at Every Level
37mBuilding Security Champions
27mSecurity Champions: The What, Why, and How
32mBeyond training: Building a high-impact security champions program
32mSecurity Champions? Introduce them in your Organisation
48mGrowing A Security Champion Program Into A Security Powerhouse
51mBuilding Security Champions
49mTransforming Security Champions