How to Build a Team That Believes in Security

Andrew: We're trying to do that whole shift-left thing of bringing in security very, very early in the earliest conceptions of new features and functionality. The developers never get a chance to write stuff that's insecure, because we have security people saying, hey, where's your threat modeling? He says he used to work at large companies when security was a very removed function from development. "I think one of the where a lot of organizations fail is where security is imposed by," Andrew adds.

Play episode from 42:27

Transcript

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app