關於這一集
In this conversation, Robert Wood and Gunnar Peterson delve into the complexities of application security (AppSec), discussing its evolution, the importance of building effective AppSec programs, and the need for engaging developers in security practices. They explore the blurred lines between cloud security and application security, the role of posture management tools, and the significance of an asset-centric approach to security. Gunnar emphasizes the importance of understanding key use cases and platforms within an organization, as well as the need for security professionals to broaden their skill sets to navigate the changing landscape of cybersecurity effectively.
Takeaways
- Application security is evolving, requiring a focus on both technology and human factors.
- Understanding the organization's current state is crucial for building an effective AppSec program.
- Coverage and efficacy are key metrics for assessing AppSec initiatives.
- Engaging developers is essential for successful security practices.
- In larger organizations, security efforts can become check-the-box activities.
- The lines between cloud security and application security are increasingly blurred.
- Posture management tools are emerging to address skill gaps in AppSec.
- An asset-centric approach to security is gaining traction in the industry.
- New security professionals should prioritize understanding key business use cases.
- The future of security will require blending traditional practices with new technologies.
Sound Bites
- "Good judgment comes from experience."
- "You have to have the humility to recognize."
Chapters
00:00 Introduction to Application Security and Its Evolution
02:59. Building an Effective AppSec Program
05:51. Understanding Coverage and Efficacy in AppSec
08:58. Engaging Developers in Security Practices
11:52. Navigating Federated Environments in Security
14:55. The Blurred Lines Between Cloud and Application Security
17:46. The Role of Posture Management Tools in AppSec
21:10. The Importance of Asset-Centric Security
23:55. Advice for New Security Professionals
26:45. Final Thoughts and Future Trends in Security
英語
美國
逐字稿 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
本 Podcast 中的其他單集
Summary
In this conversation, Robert Wood and Joe Lewis discuss the complexities of leading cybersecurity efforts within a large organization like the CDC. They explore the balance between security and mission enablement, the nuances of risk management, and the importance of compliance. Joe emphas…
In this conversation, Robert Wood and Mads Bundgaard Nielsen delve into the complexities of cyber risk quantification, exploring Mads' journey into this niche field, the importance of a business-first approach to risk management, and the distinctions between compliance and effective risk management…
In this conversation, Robert Wood, CEO of Sidekick Security, interviews Tyler Healy, CISO of DigitalOcean, discussing the evolution of security leadership, the importance of security as an enabler for business growth, and the dynamics of building a security team. They explore the challenges of enga…
Summary
In this conversation, Robert Wood and Joe Lewis discuss the complexities of leading cybersecurity efforts within a large organization like the CDC. They explore the balance between security and mission enablement, the nuances of risk management, and the importance of compliance. Joe emphas…
免責聲明: 本頁面嵌入的 Podcast 和封面圖片來自 Sidekick Security，歸其所有者所有，與 Listen Notes, Inc. 無關聯，也未獲得 Listen Notes, Inc. 背書。
