Want Better Security? Live Where Your People Live
summary
Explains how embedding a small security team into product engineering processes at Adobe—working in engineers’ environments, integrating with their tools and workflows, and providing security as a service—improved security outcomes. Describes using automation to gather and improve security-relevant data, drive desired behavior, and scale security and compliance efforts despite limited specialist headcount.
AI-written summary · about
chapters (15)
- 0:00Start
- 1:21Motivation Theory
- 2:51Starting Out
- 14:00Security Offerings
- 16:36Inherit with the Existing Process
- 18:43Leverage Existing Process
- 22:29Simplify and Push the Knowledge Upstream
- 25:00Automation
- 25:43Process for Automation
- 26:39Automating Measurement
- 26:55Splc Kpis
- 28:18Automating Follow-Up
- 29:29Automated Workflows
- 30:48Technical Integration
- 31:01Development Lifecycle
related talks
24mBeing secure by design: Engineer-led security
28mSecurity as a Service: Work where You Engineers Live
20mTo the Cloud! Software Security Evolution at Adobe
20mSecurity Culture & Scaling Your Security Humans
38mKeynote: Dumping Traditional Security Teams
03mImplementing security into an organization
05mAn Analysis of the Role of Situated Learning in Starting a Security Culture in a
54mScaling Security in Agile Scrum