Security by Design: Getting Cyber Involved Earlier with Kevin Spease

Cybersecurity can’t be something added at the end of a project. In this episode of The Peel, Shelley McGuire sits down with Kevin Spease, President and Co-Founder of ISSE Services, to talk about why security requirements need to be integrated much earlier in the systems development lifecycle.

Kevin breaks down where friction often appears when teams try to translate frameworks like NIST and RMF into practical engineering requirements, why developers and cybersecurity teams can sometimes find themselves at odds, and what security professionals can do differently to become enablers instead of blockers.

The conversation also explores what happens after a system goes live. How do organizations maintain compliance while continuing to respond to new vulnerabilities and emerging threats? And how can cybersecurity teams stay involved in change management without simply showing up with another “no”?

For anyone working in cybersecurity, systems engineering, federal IT, or mission-critical environments, this episode offers a practical look at building security into the process from the very beginning.

To connect with Kevin, follow her on LinkedIn here.
Learn more about ISSE Services at their website here.