The Advantage of Ignoring the Long Tail of Security: A Product View
summary
Describes a practical, product-focused method Honeywell uses across 300+ cloud subscriptions and hundreds of products to prioritize common security work over chasing elite threat actors. Covers how to balance security requirements with product teams, decide essential risks to address for minimum viable products, and deliver industrial-grade security at scale for cloud B2C and B2B offerings.
AI-written summary · about
chapters (17)
- 0:00James DeLuccia
- 5:06Global product footprint, team, and market
- 6:29Long Tail of Security Controls
- 8:40Context matters, examples
- 10:47Based on this lens, we prioritize controls
- 11:34Demonstrative Organizational Roles & Priority
- 14:41PROGRAM Backbone - Standards
- 15:37Set your management system and then layer in controls
- 16:28Embed and own the SDLC process
- 21:56Invent and create alternatives
- 26:42Track, Log exceptions, and escalate
- 33:06We must evolve too
- 38:48Long Tail - Foundational vs Shiny Controls
- 40:49A few of my favorite 'Shiny Objects'
- 41:46How can you measure shiny impact needs for your org?
- 44:51Actions, the most important
- 45:58Please grab the expanded list of my cloud security control recommendations for businesses in 2019 now on slideshare.
related talks
46mIn Search of Security Shangri-la
11mCybersecurity for an Inclusive Future
57mMaking Security Priority Zero
48mLevel Up Your Security Mindset
52mPrioritizing Security correctly
51mCloudSec Hero to Zero: Self-Obsolescing Through Prolific Efficiency
24mSecurity by default
36mHow to build continuous security and embed it in your product