))
Moving from Reactive to Proactive in your Application Security Program
Fetch error
Hmmm there seems to be a problem fetching this series right now.
Last successful fetch was on July 31, 2025 18:10 (
What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.
Manage episode 442935920 series 3589650
Kandungan disediakan oleh Chris Lindsey. Semua kandungan podcast termasuk episod, grafik dan perihalan podcast dimuat naik dan disediakan terus oleh Chris Lindsey atau rakan kongsi platform podcast mereka. Jika anda percaya seseorang menggunakan karya berhak cipta anda tanpa kebenaran anda, anda boleh mengikuti proses yang digariskan di sini https://ms.player.fm/legal.
In the episode "Reactive to Proactive" of the podcast Secrets of AppSec Champions, host Chris Lindsey engages with Shashank Balasubramanian, the Head of Application Security at Tripadvisor. Shashank has been managing the application security program at Tripadvisor for over four years, during which he has overseen the transition from a reactive to a proactive security approach. The conversation delves into the distinct characteristics of reactive vs. proactive security programs, highlighting the importance of integrating security measures early in the development process and fostering strong relationships between security teams and developers.
They discuss the significance of implementing the right security tools, such as Software Composition Analysis (SCA) tools, to address third-party vulnerabilities effectively and integrating these tools into the CI/CD pipeline. Shashank emphasizes the value of building a security-aware culture within the development teams through regular training and the establishment of a Security Champion program. These champions, who are trained in security best practices, help scale the security team's efforts by embedding themselves within various development teams, facilitating a proactive approach to security.
The episode also touches on the importance of executive engagement and effective communication regarding the security landscape. By providing detailed reports and metrics to executives, security teams can ensure there is a clear understanding of the program's ROI and reduce the likelihood of surprise incidents. This high-level visibility and proactive security posture ultimately lead to a more robust and efficient security program, enabling the organization to address vulnerabilities before they become significant issues. The conversation sheds light on practical strategies and tools that can help security professionals transition from reactive to proactive security measures, fostering a more secure and resilient organization.
| ❇️ Key Topics with Timestamps
00:00 The Reactive Approach to Building Software Programs
04:51 Empowering Proactive Vulnerability Management with Appsec Tools
06:48 Maximizing ROI by Installing Security Tools in CI/CD Pipeline
12:20 Optimizing Security-Team Communication for Program Success
14:05 Strategic Approach to Security Threats in Business
18:33 Engaging Developers in Security Through Champion Program
22:43 Preparing for Unexpected Challenges in the Industry
24:11 Prioritizing Open Source and Pen Testing
27:05 Appsec Champions: Valuable Tips for Success
For more amazing application security information, please visit the following LinkedIn communities:
https://www.linkedin.com/company/appsec-hive
Provided by Mend.io (https://mend.io)
15 episod
Kongsi
