Democratizing Security: A Story of Security Decentralization
summary
Medallia experimented with decentralizing security to make vulnerability remediation and security decisions a shared responsibility across teams. The talk describes DevSecOps-focused initiatives that increased transparency and participation—empowering non-security groups to take ownership—and provides a practical checklist for implementing similar democratization steps in organizations.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:10Fitness trackers
- 3:13Accessibility
- 3:57Visibility Transparency
- 5:47Behavior influencing technology
- 6:16Security nirvana
- 6:39Security inclusion
- 7:18Security champions program
- 10:01Training and awareness
- 12:38Proactive security
- 14:02Transparency
- 17:59KPIs
- 19:51Increased Collaboration
- 22:32Oversight
- 25:02Vulnerability Management
related talks
38mKeynote: Dumping Traditional Security Teams
16mDevOps and Security
31mDevSecOps, or How to Integrate Security into DevOps Practices
30mHandling Security Objections to DevOps
22mShifting left, how security fits into the DevOps story
23mDevSecOps - By Any Other Name
45mSecurity Automation for DevOps at the Scale of Dell: A Real-Life Case Study
26mSecurity Is an API: Evolving to a decentralised security culture