Given the pressures for organizations to detect, act and combat current and future threats to their businesses and computing environments, while still viewing IT and particularly security, more of a cost center than a business partner, there needs to be a new approach for aligning security with business mission.
Often organizations are just trying to meet compliance guidelines because of the effort and resources required to meet the bare minimum, while developers and operations teams may be deliberately or inadvertently making their software and systems less secure due to the complexity of modern offerings.
How do we instill a culture of security thinking and action, while ensuring they are considered business partners that enable rather than prohibit efficient and useful operations of organizations
This talk will cover some aspects of communications, security value stream management, and a way to transform and modernize your technology ecosystem without sacrificing your risk profile and threat models.